base rule: dont use Claude. never run it or allow it to be installed anywhere
I'm with you here, just asking what the proposed stack is here, which you did not include.
If I understand correctly you're saying custom agent and possibly locally run open model, or are you saying no to all LLM / agent use outright? Either is fine, I'm not here to tell you're wrong, I'm just curious about what others are doing.
There is no need for that. Running an agent in your computer gives RCE to a third party, this is obviously insecure, and it is very hard to make it secure, just a VM or a VPS is not enough.
Creating your own agent with just the model API, not the agent, might be easier to secure as you control the system prompt.