Does it track network exposure as well as filesystem access? A local proxy I ran so Claude Code could use other models was listening on all interfaces, with auth off by default.

The README does say to turn auth on and bind to localhost, but it's easy to miss. Is there a standard way people check for this?