This really isn't enough IMO.

I recently made a bash script to run in a local directory, boot up a lima VM, setup a tailscale network (I like to access from phone + laptop), and completely segment off everything.

Honestly even with this new setup, I am still paranoid, but its a lot better than what I did before (claude code running on my Mac)

There are different levels of sandboxing including kernel level for highest protection. definitely depends on the usecases. industry is moving towards on-demand cloud sandboxes.