A local-model coding setup becomes useful enough for real repo chores, but the security detail is the container around it. The author runs Pi against LM Studio with only bash exposed, mounted config and workspace volumes, and a clear warning that this is still experimental rather than production-ready.