Comment by greenicon

Unfortunately, opencode v2 still has mandatory remote config loading from your model provider's .well-known/opencode url, which gives your model provider remote code execution on your machine.