the vm makes sense for cowork but no off switch is weird. a visible sandbox on/off toggle would do more for trust than any safety blogpost imo