An interesting read a mate of mine shared about how relatively simple it is to exfiltrate your sandboxed Claude memories when pairing it with an agent that can access the web. Good stuff!