Honestly, the safest move is to keep these files totally separate from your personal stuff. Running them in a VM or dedicated hardware is really the only way to avoid getting hacked.

This is so fucking sad to acknowledge that a lot of people just want to squeeze any profit left in the industry, even though they know AI is a great tool for developers, not a replacement. They must know that because anyone who can access it can replicate the same things, making these products uncompetitive.