It’s to keep “the people running it accountable.” The context is agents ran by OpenAI/Anthropic doing damage outside.

There is no user-involved damage. No one is recklessly running agents by the thousands without air-gapped containers, except “the people” than run these labs.