Comment by ClassyJacket

But you have to trust them that the secret key never gets transmitted, unless you compiled it yourself.