Neither. They are not your friends.

Use a coding agent that does local inference and doesn't send whatever you type to them to someone else's server.

How do you know if you accidentally entered your password somewhere and that was sent to their servers?