fwiw there are more granular controls, where you can for example allow/deny specific bash commands, read or write access to specific files, using a glob syntax:

https://code.claude.com/docs/en/settings#permission-settings

You can configure it at the project level