Comment by badcafe23423435

9 hours ago

Why not create a separate account on Linux just for the agent? This security measure should also be enabled by default. Many packages REQUIRE the creation of an account, but agents do not. Interesting.

You can definitely do that, but it is your duty and it cannot be delegated.

Also these things are supposed to help you, their idea is that you give it access and it's helpful proportional to the access you give it. A separate user works for some, especially when vibecoding, you whitelist accesses. But for general computer usage, an assistant that has access to your files and acts as a sort of OS needs your user access.