It's because of this hard problem that I'm thinking I should keep using Viktor (getviktor.com) instead of running this OpenViktor.

The company may not do a perfect job of security either, but I figure they'll do a better job than I can as a solo practitioner.

Agree, anything that agent has access to is like giving it to malicious user. Especially when agent is exposed to different users that should have different permission levels