Ehh, I think it's hardly different from the people who leave Claude Code working on problems overnight with really loose permissions - seemingly the chance of them returning to it mining crypto for Putin is low enough for it to not be a consideration (see the whole OpenClaw movement).

And people have been remoting into their machines for a while, so now having a pretty-UI-but-walled-garden variety doesn't ring that many alarm bells. If they manage to get it right, it wouldn't be that much different from running some CI stuff on your machine while you're making tea, or reviewing pull requests while lounging around.