Hacker News Reader

An agent running in a restricted sandbox helps fuck-all if the underlying prompts are sent to a mothership datacentre somewhere.

And how do you suppose that happens when it's running in a sandbox that prevents things like network access?

I think he means incase you're not running it locally and instead rely on a provider where it'd just exfil via thinking blocks or whatever