Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

The Codex one is the funniest to me — allowlisting git show by name and never looking at the arguments.