Yes, they can and they can also access files on your system. The reason is that by default, a lot of your system files are stored directly on your OneDrive cloud account. Most users are rather unaware of the fact that their data is stored online. Even more, data can be replicated as it is at the same location across devices connected to the Microsoft account.