It just depends on the task I suppose. One could have a VM dedicated to a model and let it control it freely to accomplish some set of tasks, then wipe/redeploy if it ever breaks.

Well, that’s another way of saying „not allowing it to see my screen“ ;)