OpenClaw’s security model is broken by design. The development process is a flood of AI-written PRs being merged with seemingly minimal review, and the maintainer’s response to documented vulnerabilities was to say that the project is a hobby and that people should send patches if they want those things fixed. Nvidia’s NemoClaw improves the runtime posture around OpenClaw, but it doesn’t make OpenClaw itself a well-designed trust boundary. It wraps the agent, and it doesn’t change the fact that the core project trained users to connect a broad set of services to a system that historically treated local trust, stored credentials, and plugin execution too casually.