Comment by rdbell

You can place your own CLIProxyAPI instance in front of the reseller proxy and block prompts/responses that look harmful.

There are community plugins like this: https://github.com/rheodev/cpa-plugin-privacyfilter

I haven't tried the plugin system myself yet.