Some thoughts on how Claude can still read your .env files even if it's told not to, which could compromise secrets. My colleague had this issue despite using specific instructions. I'm experimenting with 1Password environments to protect sensitive data. I think Claude's current mechanisms need strengthening for better security. https://eve.gd/2026/04/19/claude-code-can-consume-transmit-and-compromise-your-env-files-even-if-you-tell-it-not-to/