.. after being pwned, and even then only maybe. Unless.. pushy ads for bugfixes?
Not to mention local-first software has much less attack surface for pwnage. You can wrap insecure protocols with encrypted tunnels, you can share files from a legacy app with any secure file transfer app of your choice... or if all you need is local functionality you don't need to share at all which means no remote access possible.