Where cloud models still clearly win
Capability comes first. The largest frontier cloud models are still noticeably stronger than anything that fits in a Mac's unified memory on the hardest coding tasks: multi-file refactors, subtle bugs, reasoning through an unfamiliar codebase. The gap has narrowed as local models and quantization have improved, but it hasn't closed, and pretending otherwise leads to frustration on hard problems. Context is related: cloud models offer context windows far beyond what you can hold locally alongside the weights. The RAM post explains why the KV cache, not the weights, is what runs out first in a long local session.
No setup is the third. Give an agent an API key and it works: no model download, no quantization choice, no hardware ceiling. If you're not already committed to a local workflow, that's the easier path.
Where local models win
Cost at volume is the most concrete. Once downloaded, a local model's marginal cost per token is electricity, with no per-request billing. That matters a lot for an agent that makes dozens of tool calls and self-corrections per task, each one a separate model call. This blog's benchmarks measure the isolation overhead, but for anyone running agents constantly, the API bill is the bigger number.
Privacy is the second, and for some work it's a hard line rather than a preference. A local model never sends your code anywhere, which matters for proprietary code, client work under NDA, or anything regulated. The AI Bridge privacy post covers exactly what leaves the Mac. Offline reliability is the third: a local model keeps working on a plane, on a bad connection, or during a provider's outage.
Isolation applies to both, differently
Running the model locally and running the agent in an isolated VM are separate decisions. The agent-isolation setup on this blog sandboxes the agent's actions, its file access and commands, whether the model behind it is on your GPU or in the cloud. A cloud-backed agent still benefits from a VM, for the reasons in the AI agent security post. And a local model doesn't make an unsupervised agent safer: the risk is in what the agent does, not where the weights live.
A practical pattern
Many workflows split the difference: a local model for the high-volume, lower-stakes loop (lint fixes, small refactors, boilerplate, anything run constantly where cost and latency add up) and a cloud model for the harder, rarer problem that benefits from frontier capability. AI Bridge can point at either kind of backend from the same isolated setup, so switching is a configuration change rather than a rebuild. Design for both even if you start out leaning one way.
The decision
- Cost-sensitive, high-volume or often offline: lean local, and see the quantization post for getting the most out of your memory.
- Privacy-critical or regulated: local isn't optional. Start there and work within its limits.
- Hard, infrequent, high-stakes problems: lean cloud, and isolate the agent anyway.
- Not sure yet: set up for both and let real use show you where the balance is.
Related reading: how much RAM local LLMs need, LLM quantization explained, what leaves your Mac with AI Bridge, and what sandboxing an agent costs. Or download Velo Workspaces and try it yourself.