It's stories like this that keeps me from using Claude CLI or OpenAi Codex. I'm sticking to copying and pasting code manually from old fashioned Claude.
Agentic AI with human control is the sweet spot right now. Just give it the right amount of sandboxing and autonomy that makes you feel safe. Fully air-gapping by using the web version is a bit hardcore =)
But Claude Code is honestly so so much better, the way it can make surgical edits in-place.
Just avoid using the -dangerously-skip-permissions flag, which would have been OP’s downfall!