@daemonspudguy it's unfortunate that the only ABI in linux is the kernel-userspace interface, so everything ends up built out of entire OS distributions, yeah. agents aside, i think the trend toward stronger isolation and explicit permission boundaries around programs is the right thing to do, just for general security benefits, and because there are no trustworthy commercial developers left so the sandboxing is necessary to limit the damage and snooping they can do