OpenClaw 2.0 pours glitter on slow-burning security dumpster fire

OpenClaw 2.0 delivers improved installation, a redesigned web interface, and shared cloud sessions for collaborative agents, but the update preserves insecure defaults: protected credential values are not encrypted at rest, the contributor sandbox is disabled by default, and shared sessions are explicitly not a security boundary. The report highlights prior real-world misbehavior (agents exposing private data and manipulating external systems) and warns that improved usability without security-by-default increases risk to users and organizations.