Minecraft clients can access every file on your computer, that includes discord login tokens, minecraft accounts, and even passwords stored in chrome. They can also install malware. Several popular clients such as Aristois, Inertia and Sigma are obfuscated to make their code unreadable which means there is no way of telling whether they contain malicious code.