I don’t think there’s anything wrong with running Openclaw. I run it in an isolated server, and it doesn’t have access to my data - if it goes tits up, it deletes unimportant stuff only. If anyone gets access to the credentials in it, and maybe its Google account (I went with the approach of giving it its own Google account, so that it can create docs and calendar events and then add me, rather than getting access to my Google account).

What is way too brave for my taste is giving it access to accounts with your personal data, or the filesystem in your computer. That’s a disaster waiting to happen.