I think the issue is, we understand our own usage of it, and respect the boundaries of what's possible and what needs to be done to use these tools properly.

But we don't know how the other guy is using it.

We don't know if they're being responsible, and using it in a safe manner.

If they are: great. But if they aren't, we're opening ourselves up to all kinds of security shenanigans.

It's one of those things where we're only going to be okay with it, if we're the ones using it. But that also means other people will be suspect of our code.

It's really a no win scenario, except for inside each of own little bubbles.

Until very recently, local models been little more than brittle toys in my experience, if you're trying to use them for coding.

But lately I've been running Pi (minimal coding agent harness) with Gemma4 and Qwen3.6 and I've been blown away by how capable and fast they are compared to other models of their size. (I'm using the biggest that can fit into 24gb, not the smaller ones.) In fact, I don't really need to reach for Claude and friends much of the time (for my use cases at least).