What sandbox are you all using for AI agents?

Hi everyone, I use AI agents to code and manage my personal files heavily. However, I am worried that the agents may accidentally delete some important files on my machine, outside of the defined scope. I am wondering what sandboxes people are using. I am looking for a solution that is easy to use, perhaps just one line, e.g. `[sandbox] opencode --allowed_folder=[folder that the agent can work in]`

I've done some research and found two popular options, Bubblewrap and Docker Sandboxes. However, Bubblewrap's configuration is quite extensive. Docker Sandboxes seem easy to use, but an account is required to use, which I am not a fan of.

I decided to post here as people in the non-local-LLM communities don't seem to care about this, claiming that "frontier models is not too prone to prompt injections" etc. I am mostly using small LLMs, so it does matter a lot to me.

Any experience or recommendation will be appreciated. Thank you!