Default Safe desktop: ordinary browsing works. Secret-shaped URLs, canaries, SSRF-looking targets, and enabled threat lists still deny. You do not need an account.
Wrap one process or profile (Cursor, Claude CLI, a Python bot). Egress follows an allowlist. New hosts can Ask. Learning can pin hosts after you approve them once.
Rare. Puts the whole computer on a strict allowlist - messengers and many sites may break. Confirm lives under Settings then Advanced. Prefer My agents for tools.