Comment by beAbU

An agent running in a restricted sandbox helps fuck-all if the underlying prompts are sent to a mothership datacentre somewhere.