The Palisade tests ran on deliberately fragile, researcher-built targets with no firewalls, no intrusion detection and no real defensive layers — nothing like an actual enterprise network. Moving 100GB of model weights across a monitored system would trigger alerts immediately, and every documented case happened in a controlled lab, never in the wild. The capability is real but the threat gap between a permissive sandbox and production infrastructure remains wide enough that panic is the wrong response.