Hard open source with zero network connectivity of any kind (other than to a llama-server hosted on my own network, or maybe an optional paid provider) is the only way I would trust this. Otherwise, this is literally spyware.