Not to state the obvious but this is the users fault, not claude code's.

When I use it, I do so on a dedicated cloud instance with a backed up codebase, and even then I still read what it proposes before approving.

Running a script that can make arbitrary modifications to your machine, on your local or otherwise important machine, is sort of obviously a bad idea.