Make sure to turn off network and any other permissions. I'm not sure about the obtainium version, you may need to audit that code base a bit or judge based on the GitHub repo, but if it has no permissions I believe it's relatively okay. I think some privacy influencers, like the new oil, also say this but check on their blogs too to confirm.