I've found Claude Code's built-in sandbox to strike a good balance between safety and autonomy on macOS. I think it's available on Windows via WSL2 (if you're looking for a middle ground between approving everything manually and --dangerously-skip-permissions)
Still waiting for progress from the team trying to get WSL approved for use at our org. We get a "still working through the red tape" update every couple months.
Use yoloAI and you get the full benefit of --dangerously-skip-permissions with none of the risks.
https://github.com/kstenerud/yoloai
Every time I use a bare Claude session (even with /sandbox) without using yoloai, it feels like using a browser without an ad blocker.