They have terms to not allow `claude -p` used like that. However, people can hide this with the leaked source code. What a funny cat-and-mouse game!