OpenClaw Is the Right Idea with the Wrong Defaults

I recently wrote about the PKM automation stack I run on a Mac + VPS with Tailscale, background agents, and Claude Code skills. A few people pointed out it's basically OpenClaw. They're right — same architecture, very different security posture. This post compares the defaults.