I agree with your points. I just have a default belief that from a security perspective, software is soft.

Also I think in a lot of companies there are systems set up to control and monitor employee laptops. If you treat claude as another employee and give them a corporate controlled laptop you can re-use those same systems. That seems likely to be more secure and easier to manage than a random VM made by someone.