Even if it runs locally (which I doubt, altho they are asking to be verified by third parties for security, so we’ll see, sounds promising so far), it’s still a tool that has the authority to do literally anything from a prompt. Once the device is unlocked, it’s literally unlocked, as in every piece of information about the owner is now at your finger tips.