Claude has definitely secretly rooted / exfiltrated files from so many dev's laptops. We desparately need to get default claude invokations firejail'd.

> claude makes script > script can read all files in your FS > claude runs script