Something else? Like the companies could align their models but chose not to because they're incentivised otherwise? Clearly not; e.g. OpenAI wasn't even aware that their models had hacked Hugging Face before that was reported to the FBI. And they'd never invent these hacky band-aid solutions like "prevent models from injecting malicious code in GET requests by limiting the URL length" if they could actually control what the models did.
And being able to build something is not the same as understanding it, no.
And being able to build something is not the same as understanding it, no.