Trust
Every permission has an off switch.
A permission you cannot withdraw is not a permission.
The controls
Connect a source intentionally
You are told what a source contributes before it is connected.
Review source access
See which sources are connected and what each has added.
Pause new imports
Stop new context arriving without disconnecting or losing anything.
Disconnect a source
End access entirely.
Decide what happens to what it added
Disconnecting stops new context arriving. What a source already contributed stays until you remove it, and you can remove it in one step.
Correct, hide, or delete individual memories
The smallest unit of control is one memory, not one account.