Pi with extensions included is always going to burn more tokens than pi without extensions, no?
Hell, some extensions could theoretically lower your token burn. (Like rtk, if it actually worked.)
But you want to forbid those people from driving.
Do you work for Anthropic?
I have another one that allows you to edit the items in your Pi /tree history.
Some permission manager extensions also sit between the model and the harness, and don't actively change the tool or prompt info.
I probably have more, but you get the idea.