"they’re quietly running Claude Code" ... with their tokens or even worse full on usernames and passwords that have write/execute privileges.