I want to set this up but I'm concerned about the privacy and security risks. On the one hand, person data is flowing through cloud models. Then there's the risks of prompt injection and such.

I thought about running it locally but it gets expensive.

Those that have taken the plunge, how did you make peace with these trade offs?