Yeah the remote person can do whatever they want. They can definitely also hide what they're trying to do without much effort. The idea is to use this only with people who you would give physical access to anyways. I do really like the idea of a read-only mode with a way to suggest commands as a way to open this up to more use cases.