The real Claude Cowork security tip isn’t “watch the commands.” It’s “watch the drift.”

If it starts touching files, sites, or tools you never asked for, kill the task before curiosity turns into incident response.