Has anyone else had the problem where the first generation Small Child seems to be able to break out of its container and access root privileges directly? My c

Has anyone else had the problem where the first generation Small Child seems to be able to break out of its container and access root privileges directly? My cofounder and I tried to implement some firewall rules, but our Small Child seems to bypass them with little effort.