demployment Pipelines for power platform

When a pipeline is hosted in another environment and you run it, the original pipeline data is used directly in the hosted environment and no separate copy of the data is created. Is it correct ?

and

If someone has access only to the host environment (where the pipeline runs) but not to the test and development environments, they will not be able to access the data or settings in those environments. These environments are managed separately and their information is not visible in the host environment. Is it correct too ?