Fake self-hosted: Only execution runs locally. Prompts, code, and tool outputs are sent to external Cursor servers for inference.
Since execution runs locally, you end up losing on compute, while code edits, error logs, and text are still sent to Cursor's cloud — so security is unchanged.

Seonglae Cho