What about it? It's a spectrum. My Claw runs in an isolated VPS with a firewall that allows only Tailnet traffic. The calendar I gave it access to is a proxy that does not have any event details, but only blockers. That way it is able to schedule for me without knowing anything about my schedule but blocks.

I have not found a good solution for email yet. I am thinking to have a separate instance running emails through my homelab that runs local models, but I have not gotten to that yet.