> These and other methods are good reason to believe that AI can never be 100% contained, which gives me pause.

Can’t leak secrets if you don’t have RAM.