Local execution of LLMs does not guarantee total data privacy. Side-channel attacks and memory leaks can still expose sensitive user prompts to malicious actors. Apple and other hardware vendors must address these hardware-level vulnerabilities. Practitioners should avoid treating on-device processing as a complete security solution for highly sensitive datasets.