Yes. I agree that many of the announced and currently shipping features should be just fine from a security perspective with only a local agent.
If anything a local LLM is more likely to have those problems because it's not as capable at detecting malicious tricks as a larger model.
Of course there will probably be a setting to auto-approve everything...