Yes, we can't build models today that reliably make these kinds of inferences. But if we consider a model which is architecturally identical, yet improved far enough to make good predictions, it seems like it would be able to make this kind of inference.

As Stuart points out, the hard part is pointing to the part of the model that you want to access. But for that you don't have to define "freely, unpressured and unmanipulated." For example, it would be sufficient to describe any environment that is free of pressure, rather than defining pressure in a precise way.