You don't have to use their container thingy though, you can run Codex (CLI or VSCode, it doesn't matter) just fine in YOLO mode in your own local containers, or VMs, or however you want to isolate it.