This is not some fundamental problem. There are amazing options that don't suffer this downside. Most people are just too lazy and want something that works out of the box, so they accept or ignore the inherent risks of tools like Claude Code or Codex. But you just have to invest a little bit of research into what you need and which open model and harness suits your requirements. Then you can have your cake and eat it too. Long term this will be the standard anyways, it's only difficult while the frontier is moving so fast and aimed at ridiculous IPOs.