It does circumvent a flimsy control: "The env command is part of a hard-coded read-only command list stored in the source code. This means that when Copilot re

It does circumvent a flimsy control: "The env command is part of a hard-coded read-only command list stored in the source code. This means that when Copilot requests to run it, the command is automatically approved for execution without user approval."