Opencode and other harnesses like Pi do support codex and claude(for now) subscriptions, but the point about security makes sense.