No, you are not being paranoid. This tool literally uploads all the code it wants off your machine, and I see no way of filtering out secrets and the likes. You

No, you are not being paranoid. This tool literally uploads all the code it wants off your machine, and I see no way of filtering out secrets and the likes. You have all the rights to be worried about that.