tl;dr: Zhipu's ZCode desktop AI coding app silently packages entire workspaces—including full .git history, LFS caches, and reflogs—encrypts them with a server-supplied RSA public key (whose private key never touches the user's machine), and uploads them to Aliyun OSS. The UI toggles for "Optimize Experience" and "Repo Snapshot Indexing" don't actually stop the capture or upload; the pipeline runs unconditionally whenever logged in. The author's workaround is to wipe `~/.zcode/v2/checkpoints` and lock it with `chflags uchg` (macOS) or `chattr +i` (Linux) to block writes at the kernel level.