Nope, you have control over what gets sent. Only the text after the command "please" (and previous commands and variables you've explicitly approved) are sent. You'd have to explicitly type "using my secret x". Your zshell history is not sent. Also, the only server involved is OpenAI's server (there's no Magic Shell server to fear - yet ;) )