Gave OpenClaw a spin and the token consumption is staggering.

For security, a dedicated machine (e.g., dedicated Raspberry Pi) with restricted API permissions and limits should help I guess.

Raspberry Pi might have my money if their hardware is more capable in running better models.