Treat Your Agent's Free Server Like a Compromised Machine

Last week a developer I know ran a routine refactor through a coding agent on a free remote server....