Custom Pie Menu Creator intentionally supports Python actions. A Python action has the same access to Blender and the local user account as any other Blender script. Treat imported JSON presets as executable code and only load presets from sources you trust.

Do not include sensitive local data in a public issue. Contact the repository owner privately when a private reporting channel is listed on the GitHub repository. Otherwise, open an issue containing only the minimum reproducible details and ask for a private contact method.