True but they won’t have lateral access to your local network nor would you be entering credentials to online services.