Comment by runtime_lens

The permission prompts after asking it to touch only 3 files are more concerning to me than Electron itself. An agent that can expand its access scope that easily needs a much clearer capability boundary, especially on a desktop where the user’s files are the real sandbox.