You should use a sandbox. It is dumb to run any proprietary software without a sandbox, especially LLM-powered.