Does that kind of thing happen in payed render farms?
I can’t speak for how other render farms work, but I know that with Barista you’re launching your own AWS instance that is very well encrypted, so there’s absolutely no way for anyone to access your files let alone your computer.