This is fun too:

...all of the models evaluated "demonstrate near-zero confidentiality awareness."

Any agent that is accessible from outside the company (e.g. a customer support chatbot) is going to have to deal with malicious actors. If it has access to sensitive information, and no confidentiality awareness...seems like a problem.