You are not too paranoid. There was a post just the other day about the Anthropic agent program sending people's emails to third parties. All the third parties had to do was require an email address to interact and the LLM would oblige because it had access to that information.

The very first thing I did before even thinking about running this stuff on my computer was learn how to make sandboxes via bubblewrap. But I'm constantly amazed by how many people are just getting by on a wing and prayer every day then cry out when things go wrong. We have the tools to take care of ourselves but most just want someone else to do it for them.