> Having come from Claude code, I was a bit shocked that both seem to allow edits by default with no confirmation dialog.

There are confirmation dialogs in OpenCode. You can configure them using the permission config, same as Claude Code. Having said that, as a general rule, none of these harnesses are safe to run on your local file system.