If you run openclaw on a spare laptop or VM and give it read only access to whatever it needs, doesn’t that eliminate most of the risk?

If you're letting it communicate with the outside world, you risk the leak and abuse of anything sensitive in the data it has access to.