You still need the models to be able to perform web searches, don't you? In which case the data goes in and out of your machine and there is risk for prompt injection attacks. I think it's needed at least for documentation purposes.

Oh, I ask for help with code, yes, but the actual data I'm working on doesn't ever leave the environment.