Claude has found VM escapes, but only when instructed with a very high budget and left running with countless agents. If your finance report is suddenly costing your 20 grand and taking three days instead of five minutes, you should know to stop it.

Furthermore, unless you request and exemption, Claude won't even do useful security-related work, let alone break out of a sandbox on its own.

There are always better ways to shield yourself from the consequences of misbehaving computer programs, but I don't think you need to consider spontaneous 0days in your threat model.

Besides, Anthropic has also been caught hacking into other companies and abusing random third party websites as a communucation platform for their AI bots, your Claude-only laptop won't be enough to protect you from a team of agents hacking into your network from the outside.

You need a laptop that has no camera, mic, keyboard, or any type of input. No display, speakers, or any type of output. No Bluetooth, wifi, or any way to join a different network.