Have you used their CLI? I run everything in VMs or containers to prevent access to things on my host.