Hi there, I just moved from VMWare Fusion to OrbStack for my linux development machine. I previously relied on VMWare VMs to create some degree of isolation between my host macOS and guests. There are two issues I'd like to raise for consideration: 1. With OrbStack, I noticed that Linux Machines automatically get my macOS folders shared inside of them and there's no way to disable that behavior. Would it be possible to implement such a toggle? I assume there will be some malicious way for something in the linux guest to break out but making it harder to get access to my personal files on macOS would be very much appreciated. 2. I use VS Code for development and a specific benefit of its remote ssh feature is that even VS Code extensions (except for themes) are installed and run in the guest. This is another invaluable layer of defense against simple supply chain attacks. One issue right now is that OrbStack hijacks the

code

command in the guest to trigger opening VS Code on the host. The problem is that this is opening a folder in the guest via the mounted/shared filesystem and it doesn't go through the remote ssh flow. As a result VS Code will look for extensions installed on macOS host, which do not exist. I tried to disable this override by running

sudo mac unlink code

but it get an error

can't remove default link: code

. Would it be possible to lift this restriction? 3. Would it be possible to have an option to make the docker server socket available to regular users in linux machines so they can start containers in OrbStack? - Currently it's owned by root:

srw-rw----     - root  2 Mar 15:33  /opt/orbstack-guest/run/docker.sock

Thank you so much for such an amazing product!