At least there's an auto-approval mode now that uses another agent to sanity check commands. Before it, the options really were manual vs yolo.