Thats a great approach, in general I think the future is to have this type of things built into the router / orchestrator code itself (ie. inside openwebUI or Cursor itself) so everything is done inside a container (ie. no more "rm -fr /" on base OS)