PPSSPP will attempt to establish connection to any IP or domain that is put in the ad-hoc server text box. So, much like a web browser, it entirely depends on where you tell it to connect.
That being said, as for any security concerns, I am unaware of any exploits and/or wrongdoings with PPSSPP code, so you should be safe. It only passes the data directly between the emulated games and the chat box feature.
Shining Force. One of few RPGs I played...
Man, I miss it. I know that the "Shining" brand technically isn't dead but, it hasn't been the same since after Shining Force 3. Or, heck, even during it.