Heads up: unlike Codex CLI, Codex Desktop is proprietary, and thus can't be audited for Claude Code style hidden anti-user behavior.

A real issue we have run into is that "computer use" features, which is absolutely a big no-no at our company, can be enabled with a single click, and we cannot configure that.