> Does this solve the trifecta, or is the network still exposed via connectors?

Having sandboxes and VMs still doesn't mean the agent can still escape out of all levels and still exfiltrate data.

It just means the attackers need more vulnerabilities and exploits to chain together for a VM + sandbox and permissions bypass.

So nothing that a typical Pwn2Own competition can't break.