Update!
1. I’ve tested the cli and works seamlessly against my local full node as the RPC provider
2. interactions with the pimlico endpoint are now done via tor by default thanks to tor-js
plugging all the holes
Let's analyze things from a privacy POV
The CLI talks over http to 2 servers which could be critical to your privacy
1. The Ethereum RPC endpoint
2. Pimlico public endpoint for 4337 UserOp submission
these are the ONLY http endpoints the cli interacts with