I wonder if that's a recent change. When I first started using OpenCode, it didn't ask permissions. I had to manually go and set that config to get it to ask.

There may be differences based on whether the command is under the directory you're running OpenCode from vs some other directory...