Thanks, is the concern being non-starter on the trust side? the binary makes zero outbound calls. It talks to your bucket and nothing else, and that's verifiable with egress monitoring. I'm putting up a security page that spells it out.

Open-sourcing parts of it isn't off the table. I kept the core closed for now to understand the interest in it.