Is it open source? Audited? It is like back to how vpn services try to establish some sort of a trust relationship, which imo is more dangerous to have a false sense of trust than none, I prefer no trust at all, zero trust, especially when the service is SaaS in the US.