I just finished writing down an "incident" in our quality manual. I used Claude Code on my /etc/nixos dir and there were some plain text smb credentials in that dir. I felt pretty bad about it. Then I try Zed and this happens.

Is it all just about trusting Anthropic? As it is with any (non sandboxed) app? Am I over-reacting?