And it's pretty easy to run in a stronger sandbox too.

"docker sandbox run claude" in a recent version of docker is a super easy way to get started.