Security Concern: Files in .cursorignore accessible to agent if they are open in an editor tab?

[MaxTee]

Also reported here Cursor is reading .env