Cursor ships with Workspace Trust disabled. https://cursor.com/docs/agent/security#workspace-trust