Nope, only if you use a remote AI managed by some greedy and faceless corporation.

Local AI with proper permissions is secure.

Yes, pretty much.