You can block file access on macOS by running codex in a sandbox with my app: https://multitui.com