Jobs run in a dedicated, ephemeral container that is torn down after execution. Assets are encrypted, and decryption is governed by Ocean Protocol smart contracts, not the node operator. You can also run on trusted Ocean Nodes and choose the node or environment you want based on benchmarks and history, giving you more control over where your data is processed.