Hell no it’s not secure. They brought up the safety issue in the livestream.

There’s a toggle when doing agent mode between “Logged In” and “Not logged in” which I assume uses a temporary chrome profile to wipe all sessions/cookies/local storage for the request. That’s quite a setting for a consumer product.