Putting these NanoClowns inside a container will not protect you from all kinds of safety hazards.
Let’s be honest. The whole thing is just the prevent Claude from “rm -rf / “.
It’s it someone is trying to avoid the thing talking to the internet or reading your emails, it’s just that it sometimes has the strange itch to change some files outside of the project.
Wearing a seatbelt will not protect you from all kinds of car accidents.
That's the fun part! You spend all day hardening it... run it in docker in a vm on a separate machine. And then you hook it up to your gmail and give it unrestricted internet access :)