I think the main problem with that is the main problem with a lot of security tools. In order to do useful work, you need to provide a lot of tools and permissions.
I.e. in theory the most secure might be a virtual machine with no network access. But then how do you access the LLM provider? Etc.
I.e. in theory the most secure might be a virtual machine with no network access. But then how do you access the LLM provider? Etc.