Edit: yes I get that there's a trust system, but I know a lot of people just trust everything in a directory.
https://cursor.com/docs/agent/security#workspace-trust