Egress controls are the only real defense here and most people running Claude Code locally dont have any.