What would you trust an agent to do on your computer while you're away?
A developer who lets an agent operate real Mac apps from an iPhone shares their trust model: reading, searching and drafting run free, while anything that sends, deletes, buys or posts asks first. The thread adds a refinement — think in blast radius, use narrow tools instead of full shell access, and log everything.