I’m fine with that. I use a top-level directory for all of my code, and restricting extension access to that directory is a great idea.
It is good but you still don't want long running background tasks.
When you run a linter, for example, then it should stop executing cider once it stops. And not be able to spawn long-running background tasks for infiltration.