One of the things I'm baffled about with Claude code is it seems like it setup a really chunky VM on my computer, and yet by default it doesn't seem to sandbox anything. Also the newer models seem really aggressive about modifying your computer. Yesterday Claude started rewriting system files on my linux machine (user accessible, but still way outside the scope of what I asked.) This wasn't me asking it to debug my machine, I was asking it to debug some frontend UI code. Once I put it in a sandbox I started realizing how often it tries to poke out of it for really lame reasons.

More reason for me to use OpenCode and my local LLMs