The default installation for claude code is hilariously insecure and the only times I've used it is in a fully sandboxed VM.