Comment by thenaturalist

Jup.

Honestly was stumped that there was no more explicit mention of this in the Anthropoc docs after reading this post couple days back.

Sandbox mode seems like a fake sense of security.

Short of containerizing Claude, there seems to be no other truly safe option.