Hacker News Reader

And how do you suppose that happens when it's running in a sandbox that prevents things like network access?

I think he means incase you're not running it locally and instead rely on a provider where it'd just exfil via thinking blocks or whatever