Are there sandboxes you typically use?

I think the biggest concern from the article would be the open http server, and things like the fetched arbitrary command execution here: https://github.com/anomalyco/opencode/issues/22191

Was that issue addressed? The comment where it was marked as closed suggested it "needed more testing" but didn't have any linked PRs.

Gemini translates the closing comment as "We are closing this ticket after a quick look. The login issue is either caused by a wrong setting/external provider, or it's a deeper problem that requires someone to dig into the backend Go server code directly."