The way you contain LLMs is the same way you will contain anything else - give it less permission and less scope.

Here. I saved you some time reading the article.