> But lots of people do.

Do they? Deliberately? I wasn't aware Cursor AI could browse my system in the background, looking for stuff in unrelated folders and files until I caught it doing exactly that. Sandboxing it to the working folder is a sad exercise in compromise and negotiation. The end result is "kinda sandboxy" rather than a hard boundary.

All the talk of AI ethics and somehow "permissions" has slipped by. I feel like we're back in iPhone 3 days where iOS apps could read and take your contacts without asking, until people complained, then it was finally addressed.