Emacs has full system access with arbitrary execution so full emacs access -> full system access.
So? My terminal has the same full system access. If I didn't use Emacs, I'd be using Claude code in it. It's contained locally on my computer, I don't see any problem here. I use Emacs like my OS-layer. Why would I complain that my OS has access to something? It would be weird and annoying if it's the opposite.
The RCE vulnerabilities especially with community flavors of Emacs that come with access control out of the box.