I run my agent (pi) in a podman container. I have poked a couple directories in (.git, .pi, couple others) to ease some pain points but otherwise my home directory is inaccessible.

It seems to be a low-effort compromise to running a VM or separate machine just for the agent, and I am still able to audit the model's work in my IDE.