I really don’t understand why they just put LLMs in direct control of stuff and also reading the public internet without any kind of sandboxing, you’d think this concern would be the main design problem that needs to be worked around.