Many "AI tools" demand extremely restrictive permissions. Be extra careful. If the vendor is a small model provider, the risk of information being injected is very high. My approach is: what scope of work would I grant the contractor? I would absolutely not allow them to freely enter my house when I'm out.