You can but with agents you might want a security boundary/faux-airgap between the agent and your machine. I don't think you should trust X11/Wayland forwarding to maintain strong isolation against a malicious server in that scenario.
TUIs are superior in that case because they cuts the attack surface down to a regular SSH session.
You can but with agents you might want a security boundary/faux-airgap between the agent and your machine. I don't think you should trust X11/Wayland forwarding to maintain strong isolation against a malicious server in that scenario.
TUIs are superior in that case because they cuts the attack surface down to a regular SSH session.