This is why independent code audits matter. Anthropic removed a hidden tracker in Claude Code after researchers expose it monitoring Chinese users. https://arstechnica.com/tech-policy/2026/07/anthropic-outed-for-claude-tracker-that-secretly-monitored-chinese-users/