I use a hook to deny attempts to invoke `grep /` and `find /`, even as part of a complex pipeline.

I had claude write a hook to deny `find /`. It tested it thoroughly. Much later I learned that the hook denied `find /` but allowed everything else that existing permissions denied, like running whatever random python/bash code it wanted without asking.