I recently got very pessimistic about this when I realized that in order for the agent to make meaningful changes, it frequently needs to read all your config files / dotfiles.. even if this is a sandboxed project, it feels pretty bad this config is instantly stored in the cloud out of your grasp. My OpenCode one day was like "and now I'm signing into your local mysql instance with your (plaintext) pw that I picked up last week to make some schema updates... " and I was like, ok we're done here.

I'm now avoiding any cloud-agents until further notice.