To be fair, those bullet points are pretty standard security best practices that any software company should be following.

But like, at the same time, even if AI companies were doing those best practices, I still wouldn’t let their products loose on production systems.