Hacking the simulation from inside is tricky. You run into all sorts of halting problems and the like. Rowhammer and similar may look like they are hacking from inside but in reality they are doing it with an outside knowledge of the system they are running on.