i've been using safari technology preview with the mcp server enabled inside a macos VM. VM used to isolate away from my sensitive data