>I have my doubts that the HuggingFace hack would happen if a person was reading the thoughts and executed commands as they happened in real time.

So what does this say about all the people running claude with `--dangerously-skip-permissions`? Are they also negligent? What if they vaguely took steps to bad things from happening, like putting the agents in a VM and locking down network access?