Run open claw safely on a Mac mini on a separate user account

Hello everyone, I've been thinking of getting started with OpenClaw. I see two schools of thought online:

1. Run it on a separate new Mac mini so that it's safe.

2. Run it insecurely on your existing computer.

Now I'm thinking: is there an in-between approach where instead of getting an entirely new Mac mini, I can just create a new user on my existing Mac and run OpenClaw in it? This way what happens is I can use my computer normally while I'm using it. When I'm not using it I can just switch the user profiles and have an always-on OpenClaw instance.

Can you please tell me if there are any pitfalls in this approach? Does running as a separate user completely isolate OpenClaw from taking any dangerous actions on my primary Mac account? Are the files completely isolated from each other? Are they secure or is there anything I should be aware of?

Thanks in advance.