The devs I work with don't put secrets in their home directories. ;)

How do you know? Do you snoop on their work machines?

And where are all their software putting their data then? Unless you consider only private keys to be secrets…

(In particular the fact that Claude Code has access to your Anthropic API key is ironic given that Dario and Anthropic spend a lot of time fearmongering about how the AI could go rogue and “attempt to escape”).

many many tools default to this, claude included