Minecraft clients can access almost all files on your computer, including discord login tokens, Minecraft accounts, and even chrome passwords. They also install malware such as remote access tools. Several popular clients such as Aristois, Inertia and Sigma are obfuscated to make their code unreadable which means there is no way of telling whether they contain said malicious code.