All the sandboxing stuff is neat but the weakest link in these claw setups is not root access on the machine but root access to your life (Gmail, calendar, etc)
access control, provisioning, and delegation have been solved for a very long time now.
But I fundamentally agree that there is just too much overlap between what makes claws useful and what makes them insecure.