Landrun: binaries are not trustworthy
If you are allowed to run a program, the program is usually allowed to see almost everything you can. Run a build tool and it can probably read your SSH keys, tokens. Run an AI coding agent and it can probably inspect your browser profile, cloud credentials, source code, spaghetti