Are we sure about that?
Codex is opensource, there are other opensource harnesses.
But Claude Code, arguably one of the most famous ones, is not. And recently got some heat about sending meta data that wasn't so obvious. Just as a counter-example.