Yes, containers/sandboxes have vulnerabilities that really clever attackers can exploit, but AI generated slop can't.

Wait are you suggesting that AI slop code can't have vulnerabilities? Cause... that's hilariously not even remotely true. It's a huge issue in SecOps, it was even an issue in the past when humans didn't have a "easy" button and every vibe coder dumped commits. It's way worse now because a lot of the vibe coded shit isn't checked, and the people who produce it have no clue what the fuck it does in the first place.