How does this compare to using something like exe.dev where you get remote isolated sandboxes over SSH, and assume you add in an http credential injection reverse proxy (bring your own)?

I'm building something that will give me peace of mind that my agents will (whether maliciously or stupidly) not negatively read/write the personal data on my machine. To me, exe.dev (with possibly a reverse proxy to preclude the agent from ever having access to my API tokens) is sufficient.