very cool, for me it's exflitration, openclaw doesn't run on my actual computer so there aren't a ton of credentials to leak, but wherever openclaw is running it needs to have basically unfettered internet access, that's what makes it so valuable but also so risky and I think exfiltration is the biggest risk there