UPDATE 2:
As @Paul Levy says in his answer below, there are problems with making sense of the exponential map when $p$ is small with respect to $n$. GAP computation shows that extending to $\mathbb{Z}$ coefficients, then restricting back down to $\mathbb{F}_p$ coefficients, fails for IIRC $sl(4,\mathbb{F}_3)$.
Indeed, there are larger problems for small $p$. The image $\operatorname{exp}(g)$ may not be an automorphism (may not preserve brackets)! I found the following paper very helpful:
Mattarei, S., Artin-Hasse exponentials of derivations, J. Algebra 294, No. 1, 1-18 (2005). ZBL1085.17003.
Equations (1.1) and (2.1) of Mattarei's paper give precise measurements of how the product fails to respect exponents. A sufficient condition is for the maximal nilpotency index of elements of $\operatorname{ad} \mathfrak{g}$ to be at most $(p+1)/2$. For example, it is enough for $(p+1)/2$ to be at least the dimension of $\mathfrak{g}$. Likely one can do better.
In particular, it looks very likely that the exponential map of the adjoint does not give automorphisms for $\mathfrak{g} = sl(3,3)$, explaining the resulting large group.
END UPDATE 2
UPDATE:
Upon closer examination, I realized that sl(3,3)$sl(3,3)$ is not simple. The nilradical, solvable radical, and center coincide as a 1-dimensonal subalgebra. Modding out yields a 7-dimensional algebra, which (partly) explains the occurrence of $G_2$.
It appears that $\mathbb{F}_3$ is an exception, as sometimes happens with small fields. I computed the inner automorphism group of $sl(3,5)$ to be $PSL(3,5)$, which is according to reasonable expectation.
In short, it appears that the answer to the question of whether the inner automorphism group of $sl(3,3)$ has order 9285337152 is "yes".