This was my immediate thought too. That this is a marketing campaign and the sandbox was intentionally soft enough. I would not be surprised even if they had already known some of these vulerabilities beforehand.
The "scary smart" narrative can now continue to pump up valuation of the company.