> The only way to avoid this stuff is to sandbox them

You lose lot of capability specially if you are using AI as your personal assistant.