No sync is not enforced, but that is how most people run it.
The problem is if your local machine is compromised, then the attacker can delete you local files. These deletions are then synced to the cloud storage.
The same can happen if you get ransomware encrypting your local storage, the encrypted changes get synced to the cloud.