Genuinely curious if people would just let this rip with no obvious isolation?

I’m aware Mac OS has some isolation/sandboxes but without running codex via docker I wouldn’t be running codex.

(Appreciate there are still risks)