Here you start applying the structure of your choice to the black swan of UFAI's third option. Literally letting anything out is a trivial option, there are many others, some of which nobody thought of. Even if you can't let UFAI out of the box, that's still not enough to be safe, and so your argument is too weak to be valid.