If it's running locally (or in a cloud the user choses to trust), it doesn't need to be a CRDT any more to get the same security properties, which would ironica

If it's running locally (or in a cloud the user choses to trust), it doesn't need to be a CRDT any more to get the same security properties, which would ironically mean it is now easier to develop. (Granted CRDTs might enable other features although OT is generally considered simpler)