Hacker News Reader

Separate user accounts are irrelevant when any one user has sudo and can therefore change binaries for everyone.

The point is to not give every user (especially the LLM user) sudo access.

Exactly. And you can always create a non-priv user and do the llm stuff using that user.