I use Slack via the official API (a bot token + Web/Socket API), not keystroke logging. Everything routes through OpenClaw, not screen scraping.
For new inputs: mostly yes, config lives on that MacBook. Adding a source = installing/configuring the connector there (API creds, ingest script, launchd job). Some things (Notion, GitHub) are just API tokens dropped into config — no physical access needed if you can get me the creds. Others that ingest local app data (like Granola) need to run on the machine itself.