If you run them at home, yes.

If you run them in ANY data centre, all your Bitmain hardware is accessible and changeable by anyone else who has access to or has hardware in the same data centre.
They don't even need to login to it, they can just send API commands to it and it will accept ANY API command since they configure them to do that (even after years of me pointing out that they shouldn't)