And? If your LLM is controlling user-mode software, you can still easily capture and audit everything from the kernel's perspective. Sandboxing, event tracing, etc...