Might be more secure to get a real laptop and treat Claude as any other human worker. I.e. apply all the normal sysadmin tools that manage laptops for people to manage the laptop for Claude

A VM hosted by someone else. Somethig on your personal notebook or the proxmox server in your garage is still too risky.