I don't know, I tried using one of the Chinese models and it was VERY quick to scan my entire home dir, so maybe your threat surface is a little different than mine
They return instructions for you to do something, and you or a script you permit chooses to execute what the model tells you and return the result to the model.
Models can't scan anything.
They return instructions for you to do something, and you or a script you permit chooses to execute what the model tells you and return the result to the model.