I only run ai tools in dev containers, so blast radius is somewhat minimal.