> Even if you audit the code, once they open-source it, how do you know that what you see is the same as what they run on their end? If it's actually secure, t

> Even if you audit the code, once they open-source it, how do you know that what you see is the same as what they run on their end? If it's actually secure, then the only thing which matters is what I run on my end, since the key would be generated on my end and the chunks would be encrypted on my end. If I send a server my data, then the system cannot be secure.