By default, no: they run with your account's rights and see your whole disk. Config-level scoping (AGENTS.md, profiles) constrains the tools but isn't airtight; only a sandbox (container, VM) truly confines them. Quieta takes another angle: Mirror has the agent work on masked copies, so what it reads and sends never carries your real values. Ideally, combine both.