Haha, wow, I didn't expect to get quoted on Hacker News. Hello!
I guess "helped make Skynet auditable" may become my most popular open-source contribution, so I'm putting it on my CV.
The thing is that the subagent prompts already pass through the client - they have to, since the TUI can switch between subagents while they work. The change is just to save a copy of the prompt on disk while keeping the encrypted delivery path if necessary for Responses API.
Personally, I use multi_agent_v1 anyways (doesn't have this issue), since v2 is unstable and is a token burner.
Hope they address it so I don't have to keep maintaining it in my fork