I'm glad that when I recommended opencode to a friend, I taught them first to install a vm and create an app specific user to boot.

Many users did things right the first couple of days and then turned the security off after seeing it 'work fine' on its own.

Was a cool thing to use for a couple of weeks in v1, you have to be quite static to keep using it at v68 of self vibecoding while the llm providers like openai already developed their in house alternative.