It's fully open source. I mean yes it uses llama.cpp without giving it credit. But why run it in a VM?
Because you don't execute untrusted code in your machine without containerization/virtualization. Don't you?
There are a lot of open-source tools that we have to trust to get anything done on a daily basis.