[dingaling]

Separate user accounts are irrelevant when any one user has sudo and can therefore change binaries for everyone.

[lelandbatey]

The point is to not give every user (especially the LLM user) sudo access.

[seanhunter]

Exactly. And you can always create a non-priv user and do the llm stuff using that user.