Secure. Editing and preview are done entirely locally in your browser; content is never uploaded. The preview also escapes HTML input to prevent any script injection risks.