Sorry, I didn't understand how it happened. I see it now.

'rm - rf /*' bypassed BOTH protections for the same reason. They check for /, but the shell Claude used expanded the glob... So both Claude Code and rm saw a list of files and folders instead of the root and waved it through. Yikes.

That's a bad day. I take your point.