I imagine at the very least it will have hard to find settings making it as least secure as possible so they can get your data only become secure if the end use

I imagine at the very least it will have hard to find settings making it as least secure as possible so they can get your data only become secure if the end user specifically sets certain parameters just right.