The creator is a big part of what concerns me tbh. He puts out blog posts saying he doesn’t read any of the code. For a project where security is so critical, this seems… short sighted.