2. I have little to no sympathy for anyone running an AI agent with their full user permissions outside of a container or VM