Ask HN: What's blocking you from trusting AI agents with your real data?

With OpenClaw hitting >150k stars, clearly there's demand for personal AI agents. But I keep hearing the same hesitation: "I want this, but I can't trust it with my real data."

For those on the fence:

1. What's the specific fear? (data leakage, prompt injection, rogue actions?)

2. What would it take to trust an agent with your real accounts?

3. Are you running agents on burner accounts / sandboxed data instead?

Building something in this space and want to understand the actual blockers.