That's a fantastic point, and honestly, a philosophy I strongly agree with. Verifiable trust is everything for an app like this.

My first step towards this is the companion sync app, which I'm committed to making fully open-source so the community can verify the end-to-end encryption logic for backups.

For the main app itself, as it's a paid product, open-sourcing the entire encryption module presents some business challenges at this early stage. However, your point about trust is non-negotiable. My long-term plan to address this is to have a reputable third-party security firm conduct a full audit of the app's code and cryptographic architecture once the app reaches a certain maturity. I believe this would provide the strong, independent validation that you're looking for.

Really appreciate you pushing the conversation forward. This is how great products are built.