Still better than paying for SaaS, still getting pwned and getting free credit monitoring in compensation?

Not to mention local-first software has much less attack surface for pwnage. You can wrap insecure protocols with encrypted tunnels, you can share files from a legacy app with any secure file transfer app of your choice... or if all you need is local functionality you don't need to share at all which means no remote access possible.