Spent the past 8 working hours faffing around auditing some Claude clanker code which talks to an admin system it shouldn't have been let near, by screen-scraping and directing POST/GET requests. I also discovered it by accident while investigating another problem. Infuriating. I'm calmer than I was yesterday though.