Claude's security restrictions seem more like a CYA move than anything related to security. In particular, restrictions on analyzing artifacts uploaded or supplied by public or legitimate authenticated access to erxternal sites seem counterproductive as far as security is concerned.

I find the verification requirements particularly puzzling: low level requirements that amount to "use competing LLMs to spam reports to build cred", high level requirements that preclude detailed analysis of anything that flys below the radar of large actors.