I understand it's an open source project with p2p encryption. So for government to snoop, they must modify the code and let users download it and run the now in

I understand it's an open source project with p2p encryption. So for government to snoop, they must modify the code and let users download it and run the now insecure application. So in this case the GitHub code itself is a warrant canary.