Quoting Felix Rieseberg

Felix Rieseberg of Anthropic explained that the new version of Cowork runs model inference and the VM in the cloud, with each session getting its own sandbox, while the desktop app handles file access tool calls.