People are paying $150 to get OpenClaw installed

Twenty years ago, roadside vendors in southern China made a tidy living downloading MP3s onto walkmans for twenty cents a track. Today, the technology has changed, but the information arbitrage remains exactly the same.

Chinese tech outlet BUG reported that OpenClaw's viral popularity has created an overnight gold rush for setup technicians. Freelancers and off-duty engineers are charging between $70 and $150 for in-person installations in cities like Beijing, Shanghai, and Shenzhen. On e-commerce storefronts, remote installation teams have processed over 3,000 orders in a month, pulling in more than $40,000 in revenue, with boutique enterprise packages going for as much as $1,400.

A lucrative hustle for a fragile toy

OpenClaw is undoubtedly the tech world's latest obsession. Since breaking out in February, its GitHub repository has racked up more than 253,000 stars, surpassing React to become one of the most starred open-source projects in history. Founder Peter Steinberg went so far as to predict that local autonomous agents will eventually replace 80% of today's software applications.

Yet the reality on the ground is much uglier. Early adopters describe the codebase as notoriously brittle. For non-developers expecting an all-powerful Jarvis out of the box, the software feels more like early Android—plagued by dependencies, broken integrations, and endless debugging walls.

Then there is the running bill. OpenClaw keeps itself alert via a built-in heartbeat mechanism that wakes up every 30 minutes to check for updates. Even when sitting completely idle, that constant polling burns through serious API tokens. One developer reported spending $20 a day just keeping the agent awake, translating to nearly $750 a month in pure background noise. Hook it up to flagship commercial models, and users easily burn through dozens of dollars in hours without getting meaningful work done.

Root access meets internet exposure

Financial drain aside, the real danger lies in system security.

To operate autonomously, OpenClaw demands root privileges on the host machine. In exchange for that unfettered control, it offers surprisingly little defense. A recent vulnerability scan uncovered more than 42,000 OpenClaw instances exposed directly to the public web. Worse, over 90% of them could be bypassed without proper authentication, leaving API keys and private chat logs wide open to scraping.

Industry insiders also warn that local uninstallation is a nightmare. As OpenClaw downloads third-party skills and scripts on the fly, non-technical users have virtually no way to cleanly purge the system if they decide to quit, leaving behind significant attack surfaces.

Why it matters

The installation boom highlights the massive chasm between open-source hype and real-world consumer readiness. When an open-source project requires a $150 home visit just to configure an environment, it is not a ready-to-use product; it is an experimental runtime for hackers.

We think non-technical users and small business owners should resist the urge to buy into this craze. Handing full administrative privileges to an immature, self-modifying agent just to automate basic tasks is a recipe for disaster. If you simply need practical AI task execution, safer, enterprise-backed alternatives like Claude Code handle the core workload without forcing you to expose your machine or hemorrhage API tokens on an idling digital pet.