Without self-hosting, how can I be sure that the middleman server layer won't affect my security?