I don't run anything but the agent and the project it's working on and the tools it needs to work on the project in the VM.

You can't see how the agent having no access to anything other than what it's working on is safer than the agent having access to my home directory with all of my credentials?

Look, you do whatever you want to do with your agents and your computer. I'm going to...contain them.

https://venturebeat.com/security/six-exploits-broke-ai-codin...

Seriously, you dont see any difference? A agent is non deterministic and may delete or change you data as a normal matter of operations. A browser, barring bugs or security issues, would not delete or modify the data you have outside the browser.