Comment by hu3

I can rm -rf Windows files from WSL2. And so can LLMs.

Meanwhile a VM isolates by default.