I'm now considering installing QubesOS for all dev work to absolutely ensure all coding agents run in secure separate sandboxes together without any OS level exposure.

Phew, just get the Qubes to spin up on demand with each agent and that could be pretty neat.