Qwen Code’s June 21 nightly is not the kind of release that gets a launch thread. Good. The release reads like a security checklist disguised as bug fixes: workspace boundaries, plan-mode consent, strict environment parsing, ACP glob limits, custom theme path validation, socket-port validation, and endpoint detection. That is