Incidents like this, and OpenCode changing the DX in v2, is why I'm going back to building my own. It's also fun and interesting

Im sorry, but how could this possibly be used as reason not to use an on-host harness? If you own the code, and control the supply chain, then this is not a problem- because you can read it. Weird comment.