Right? I haven't looked into how it works (I have nothing plausible to deny :-) but the web page says it's a filesystem, so I guess it's software, it has to be

Right? I haven't looked into how it works (I have nothing plausible to deny :-) but the web page says it's a filesystem, so I guess it's software, it has to be installed or run from somewhere, and the moment any hint of that software is discovered (browser history to the github page?), then deniability becomes less plausible. At best, using it successfully would seem to require a level of secops that is really hard to achieve.