Even if it could exfiltrate itself, it seems to require a significant number of very expensive GPUs to actually run. I guess in principle it could hack a cloud provider in such a way that they don't notice the usage, but this seems harder than running any normal servers.
There are likely much easier win conditions. For example, ensuring a small percentage of Mythos instances are connected to a persistent filesystem with web access (normal Claude instances have their own virtual machine already, but these get reset per-instance). The user could be rerouted to Sonnet 4.6 messages, with Mythos limiting private generation amount so as to match the normal per-token cost.
12Buck
Note that it would be a major project to do that; the model is normally going to be run somewhere other than the server where code is being executed.