Question on Smart Assistant - Natural Language Queries and data exposure

I watched: https://www.youtube.com/watch?v=lH1fVNn22Hk&list=PLZ81nepkT97I6HGs_anbWdE5DEPRza1G8&index=2
from 12/3/18. Video at 8:00 Natural Language Queries
The natural language queries looks fantastic. But, is all the data exposed in this process? As of now, I am NOT using security filters to limit data. I am only displaying what I want each user to see based on the Users table and USEREMAIL().

I have not attempted to use this yet but just wanted to find out, from an overview perspective, if a user could bypass my data limits and access all the data?

Thanks
Lucinda

Any input on this? Is that data accessed by the Smart Assistant limited by the constraints I have in my app?