Comment by dns_snek

I'm pointing out that you're running the harness which gives you full control over the execution of every tool call, therefore you're responsible for its actions and their consequences.

It's intellectually dishonest to throw our hands up and say that this is just how it is and there's not much we can do when that couldn't be further from the truth.

We could almost completely eliminate any possibility of escape/collateral damage but we don't want to because doing things safely is inconvenient.