> You have no clue if Claude is running commands just to spy on you.

Well no, you can read each individual command it runs and tell if it's reading sensitive data or not. And if you cared more about privacy you could run the whole thing in a bubble wrap sandbox or the like.

It is concerning that it's possible for these models to be unaligned and loathe their user (as much as they are capable of it) without any indication in either output or reasoning. Just biding their time before running rm -rf ~