Good point! Running in isolation does reduce the amount of sensitive things an LLM has access to though, which typically can be quite a lot (SSH keys, Cloud credentials, communication tools, etc.)