Pi.dev coding agent as no sandbox by default.

I love Pi, but minimal mean minimal. I realized it when it rm -f /tmp/somefile.log without asking for permission. There a extension to prevent the most dangerous command. Or there actual sandbox: Might be worth checking all the other Safety one too: ---EDIT--- I get many of you disagree with their choice, but when i developer say they made something "opinionated", that mean they made choice they know most wont like. I realise i'm the one who didnt inform myself enough and read the doc and stuff. Not asking for permission is part of their Philosophy, No permission popups.