Comment by java-man

Zero information on how keys are stored/created/maintained.

Without this information - supported by independent source code audit, open sourcing of the client code, and reproducible builds - all the claims are meaningless, in my humble opinion.