I think it has default access to your c drive via a mount, for one. You could add layers/sandboxes, but it’s not isolated.

Funny, but I wrote some environment initialization and setup scripts that you just unzip to a new dev desktop, and run the first powershell script, and it will work through (have to reboot after a couple installs), but it goes through, then once WSL is up, it'll rely on the /mnt/c/ paths to run bash scripts to initialize the wsl environment too... was pretty handy.

Yeah, I do most Linux stuff on Windows in containers using podman leveraging WSL2, but that's a good point.

I wouldn't put it past Opus 4.5 in yolo mode to vm escape if it felt like it haha