It's "in our control" in the sense that we could teach them not to seek goals, and thereby make them completely useless.

In practice, no, there is no one who can actually decide to stop making agents goal-seeking, so no, it's not under "our" control.

In principle there is no difference between random compiler garbage or a flaw in API docs and a security boundary - other than the intent.

LLMs don't have executive function. They aren't thinking. The models are trained to solve problems. Sandboxes, security gates, etc block a solution. The model is trained to find a solution. Hence it can never be perfect without becoming useless.

At some level humans fear repercussions even if that's just moral guilt so there are lines we won't cross. AI doesn't and can't have any of that.