Oh, so basically, reduce the vocabulary that can be communicated remotely compared to what's available locally? I can get behind that.
It's not an easy balance to strike, though; the less capable the remote interface is, the less useful it is. "Only completely harmless commands" might simply not be good enough. For example, is "deactivate electricity output of this solar panel" (e.g. because market conditions make it unprofitable to supply at a given instance) harmless or not? What about "increase supplied frequency by 0.01 Hz to stabilize the grid"?
It's not an easy balance to strike, though; the less capable the remote interface is, the less useful it is. "Only completely harmless commands" might simply not be good enough. For example, is "deactivate electricity output of this solar panel" (e.g. because market conditions make it unprofitable to supply at a given instance) harmless or not? What about "increase supplied frequency by 0.01 Hz to stabilize the grid"?