Oh right, yeah I agree. It's the kind of thing I can imagine the harness downloading in the background anyway (or instructing the user to do) at some point so I can see the sense in just skipping that bit. Kind of comforting they just do it the same way the rest of us do - if it ain't broke and so on.

It does, however, introduce a potentially enormous attack surface into ChatGPT, along with creative opportunities for less security conscious individuals and LLMs.

You aren't worried about the provenance of the installed apps?

How do you mean?

I trust OpenAI to have installed apps that at least work well enough for their intended purposes.

You aren't worried that these binaries may have unfixed vulnerabilities?

That's the nature of installing software.

I'd like to know OpenAI's approach to updating these things - their auto-updated is pretty aggressive already, but does that cover their vendored cached apps too?

I think it's overbloating my computer