Also +1 to using containers and sandboxed environments! It means you can yolo it and skip permissions dangerously to experiment with vibe automation :)

More seriously, I agree that setting permissions to the minimum needed for the task and using sandboxed containers is sensible.