Comment by anoek

This kind of thing is exactly why I built https://github.com/anoek/sandbox . Even non malicious agents do things they shouldn't do, I've caught them removing home directory configs and installing system packages, but it doesn't matter to me anymore because they are free to do those things to see if it solves their problem, but it doesn't affect the host machine layer.