The app makes specific promises ("the app ensures user privacy by storing no personal data, making it impossible to trace reports back to individual users") whi

The app makes specific promises ("the app ensures user privacy by storing no personal data, making it impossible to trace reports back to individual users") while the Hope talk shows that the writer of the app is not familiar with very common techniques that are required to keep these promises. Warranty canaries, reverse engineering, and security though obscurity are all concepts that anyone making legally sensitive secure software should be familiar with. To make an analogy, if someone wants to start a taxi service and you say they're not qualified because they don't know about different types of tires and how to change the front lights, that would be gatekeeping. If they don't know you should sometimes change tires and turn the lights on when it's dark you should have doubts about their ability to safely run a taxi service. You could argue that he doesn't need open source and a warranty canary, but from what Micah says, it sounds like the app author doesn't have the required knowledge to evaluate the option.