You mean giving an agent access to your user space and hoping nothing goes wrong?

The default installation for claude code is hilariously insecure and the only times I've used it is in a fully sandboxed VM.