Moltbot can be safe enough, but only if you treat it like a privileged system you are operating, not like an app you are trying. A normal chatbot mostly risks privacy. An agent risks privacy plus action.