Your Keyholder controls approvals, not your computer.
The keyholder can approve or deny specific GuardianBlock changes through the web app after authentication and MFA. They cannot operate your device, view your screen, run commands, or access private files.