It's both amazing and painful to watch codex use browser + computer use to open Chrome, go to my PR, tap on comment and wrangle with the macOS picker - all TO UPLOAD AN IMAGE. GitHub has no API doesn't stop anyone.
I let my codex run in VMs so they don't steal app focus.
If you run computer-use agents locally, the VM-isolation tip prevents them from hijacking your desktop, and the GitHub-upload anecdote shows how agents route around missing APIs.
