Relevant timing: the NemoClaw thread (https://news.ycombinator.com/item?id=47427027) has a lot of discussion about whether sandboxing solves OpenClaw's security problems. We think the answer is fewer moving parts, not more layers.