The tl;dr of the tl;dr is treating the model setup like an autonomous robot with its own machine to use and just telling it what to do via chat rather than directly supervising it, which is bonkers in some ways (all the open internet/service access/permissions stuff you would imagine), and smart in others (a fully isolated machine means it can fuck up something locally or run high-load tests without taking down your important systems).