The ledger is the sensitive asset
Transactions reveal routines, relationships, medical spending, travel, beliefs, and stress. Local-first architecture treats that ledger with appropriate seriousness.
AI should query without exporting
Plain-English finance questions are most trustworthy when the model can run against local records instead of uploading the ledger to a remote service.
Exports need security too
CSV and spreadsheet workflows should handle formula injection and accidental sharing risks because finance data often leaves the app intentionally.