If you identify a valid security issue, please write an email to hatsh-security@pm.me There is no bounty available at the moment, but your github account will be credited in the acknowledgments section in the app documentation.