How could be an OS designed to keep your data away from you "secure"?
Sure, ChromeOS does so little locally its attack surface is little as well. Just, it forces you to do almost everything on servers outside your control.... the only secure thing is Google has all your data.
Biting the hand that feeds IT
