Only you switch your plugs. Each command is signed by your wallet (EIP-712) — no hub, no payment, no account.