I caught Claude using docker (running as root) to access files on my machine it couldn't read using it's user.