Location does not decide trust

Local does not automatically mean safe.

A malicious local server can read or change anything its process is allowed to reach. A remote server can receive sensitive account data or perform unwanted actions if it has broad access.

Remote does not automatically mean unsafe either. A well-run service can use narrow permissions, clear authentication, and careful approval.

Trust the program and its limits, not the distance to it.