Claude Code reads your code, edits files, runs shell commands and calls external tools in a loop, all with your user’s permissions. Securing it is mostly about the environment you give it, not the model.
This post covers what can go wrong, the incidents that prove it, their impact, and the controls that work.