Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job