Yes. Isolate them. I also automatically cycle workspace and homedir per session. If you can't, at least cycle it manually once a while. Lots of crap accumulates and its very hard to keep track of everything ever installed.

Token spend on installing tooling does rise but can always script the common items. I.e. I have pinned tools like uv, pip-audit and npm in my container image to save confusion. Painful to maintain the pins though. Also of the docker base images.