And it's the right decision: Codex works in a similar way, with auto-approving most actions it considers safe and within the sandbox, and it feels much nicer.
There are several very non-trivial steps between the agent harness stopping asking a question before running `git` with a new parameter, not seen before, and the agent draining my bank account.