Yeah, I am quite surprised this is not discussed more often - for remote cloud based AI not only does the provider see everything you provide to the tool/agent, there is no guarantee they can't manipulate the output at any time for a direct attack or more malicious purpose (fetch keys/secrets, put malware in place).
Even with locally running models this can't be singled out given how blackbox models generated by others are. You would have to generate the model yourself from clean data to be reasonably safe.
I still have an i5 2500k chugging along being able to do everything that isn't a heavy workload with ease. This kind of exploit for a CPU that is only 5 years old not getting a fix is embarrassing and shameful.
I've used it a couple of 100 hours to make 3d models for 3d-printing.
Once you get used to it it is possible to do complex designs that can be edited afterwards. In the beginning it felt like every change I made would break the model so much that I couldn't repair it again.
Now when I start a design I always start with a spreadsheet and add variables with measurements that I use in the model. Afterwards with a careful designed model I can change the variables and the model react to it in a good way. It took me a while to figure out this way if working. You learn what part works and what parts to stay away from.
That said. The GUI sucks. It crashes a lot. There are lots of weird bugs. The stable release 0.19.3 is very unstable on my computer. Even so it's a great tool for me and I'm grateful of the work put in by the developers!
The unreleased 0.20 is so much better and crashes a lot less. I wish they would just release it and be done with it.
What an easy way for that actor to introduce backdoors all over the place or to take over any developers laptop that it want to target.
How can anyone trust these tools and how can anyone not use them since they give so much value.
I've been programming my whole life and been a professional developer the last 30 years and I like think I'm good at it.
Tools like Claude is a multiplier that make it possible for me to solve a lot more problems each day, so just saying no it's not a viable option.
Exciting times ahead!