Plan mode does have different permission controls though? Its difficult for me to parse the docs on this but it does seem to imply more than just a prompt although less than a full sandbox. https://code.claude.com/docs/en/permission-modes#analyze-bef...

Plan forced the model to write down and outline what it was going to do before writing the code. As Boris said up thread, he created it to prevent it from just rushing into writing code. So that regard, it did act like a permission system.

It helps to think more abstractly when approaching problems like this.