If they do switch where xip.io points, they could see what you're doing with your dev server if your local DNS lets the resolution expire. That said, I do trus

If they do switch where xip.io points, they could see what you're doing with your dev server if your local DNS lets the resolution expire. That said, I do trust them :)