Anthropic or not, the recent streak of supply chain and also targeted attacks got me packing into VM.
Now I run all devtools and install packages only inside the VM and either connect Zed / VSCode via ssh or run terminal ide inside the VM.
No host mounts whatsoever, all communication Host to Guest strictly through git.