That's low risk when the flag is off. Is there suddenly proper code review before the flag gets turned on? That's when the risk is actualised.
Also, when they say "risk" - risk of what? Bugs and security incidents? What about other risks: future rework, slowdown of development, obfuscation of bugs, abstractions that will end up being made leaky to work etc. Are these all not considered because they are confident Claude can manage all of that?
> additive changes behind a flag
That's low risk when the flag is off. Is there suddenly proper code review before the flag gets turned on? That's when the risk is actualised.
Also, when they say "risk" - risk of what? Bugs and security incidents? What about other risks: future rework, slowdown of development, obfuscation of bugs, abstractions that will end up being made leaky to work etc. Are these all not considered because they are confident Claude can manage all of that?
So many questions