The security paradox of local LLMs