In general I agree with you, but on the other hand it is an agentic coding agent you should have isolated in a container or VM anyway