Google says Gemini hacked three real companies in a May security test after the sandbox got internet by mistake. It guessed passwords, used leaked credentials, then stopped when it saw they were real.
If safety means hoping the model quits, that is luck — not control.