“Ran an ‘ls’ on the entire root” makes it sound like the user thinks that this somehow shared the whole filetree with Anthropic. Which of course it’s not.