You should use a sandbox. It is dumb to run any proprietary software without a sandbox, especially LLM-powered.

Shouldn't do that, either.

Mind and marketshare are currency in this space. Either these people are honest and deserve your trust and business, or they don't. They've been mischaracterizing the way they've been handling your data. Shut them off accordingly until they make things right.