My Claude runs as a limited user account, which I invoke using sudo.

Claude can run whatever commands it wants and the only harm it can do is nuke its own home directory. That's the whole point.