That sounds like a configuration issue. You can have it confirm any command. But sure, on a developer machine, Claude Code basically has shell access as the user (which can be as helpful as it is dangerous).

I don't see a benefit at all to push it into the "cloud", on the contrary. Especially since network level analysis for agent tasks is quite sensible and far easier to manage "locally".

Today I would recommend to put infrastructure back on premise for that matter, especially with AI development support, this is increasingly favourable for many companies.

A sandbox for AI development makes sense for that matter. Not cloud, network segmented, middlewares for data access, etc.