I totally agree.
Clearly, an all-local implementation is safer, and using less powerful local models is the reasonable tradeoff. Also make it open source for trust.
All that said, I don’t need to have everything automated, so we also have ‘why even build it’ legitimate questions to ask.