It sounds like the main value-add of codemode is security, since its a sandboxed language that can call your MCPs with elevated privs.

But pi doesn't have security. Pi is full yolo, it's on the user to run it in an environment that minimizes the blast radius if the LLM goes haywire.

So I'm not sure what the plan is here. Will pi support running certain tools like bash as a different OS user than owner of the pi process?