The real question here is why youre freely running it on a system and dont have it sandboxed in some way. Literally the first thing i did the day i signed up for an ai subscription.

I have a base docker container and a shell script that "customizes" each instance for where its running (making sure user id matches for permissions, etc). Runs as non root in container, has minimal privileges, and only access to the repo or dir where the shell script was called

You definitely let the ai shoot your legs off all on your own.