The contractor edits everything and downloads nothing

The client's unreleased brand assets are under NDA, and you've just hired a freelancer for two weeks. The traditional move is to copy the asset library onto a stranger's laptop and trust the offboarding email.

Instead, the work happens where the assets live. The freelancer gets a display URL into a container running Inkscape with the library mounted: opened with ?clipboard=false&file_transfer=false, so the session shares pixels, not files. They design at full speed; the source files never land on their disk. When the engagement ends, you revoke their access through the container's proxy permissions, and the entire relationship closes with it.

Nothing to collect back. Nothing to wipe.

They can edit everything and walk away with nothing.