Doesn't matter anymore -- the credibility of the person leading the project is thoroughly established, so I'm retracting my comment. But generally, "says who"

Doesn't matter anymore -- the credibility of the person leading the project is thoroughly established, so I'm retracting my comment. But generally, "says who" is answerable as "says any reputable applied cryptographer, established audit/research team, etc. who's thoroughly cut their teeth on crypto and security in general."