I don't doubt that Claude Code is full of security holes (even with Mythos assistance) given its 100% vibecoded reputation, but this seems to be more an attempt to get Chinese users to migrate to Chinese products than a serious security memo.