"The model failed to refuse a cyber request when it should have" != "the agent hacked someone". For example, refusals also apply to just asking the model how to do something, without extending it any agency.
Duh? If someone uses it to try hacking you its still 96.6% refusal