And as far as I can tell, this is the exact same security model that is now used by OpenCode and similar