No question needs answering. If you want to run claude code inside sandboxed environment, it's not that hard and there are lot of options including official[0].
From the doc, this suggestion is hardly satisfactory:
The sandbox covers shell commands only. Claude’s file tools, MCP servers, and hooks run outside it.
Also this is in my view the main job of a scaffold like claude code - to restrict what the agent can see and make sure it doesn't use info it should not. It's not something a user can easily or should have to attempt to control themselves.
loading story #50391709
These CLI sandboxes are trash, use something else. Container, VM, not your computer. Just don't run it on your bare system, please.