Hm, good of you to point out. I hope and assume they will post the code for this as soon as they launch this.
I’d be very surprised if this was some sort of sham. At least both Jeff Geerling and Raid Owl have posted about getting these; though like sent to them without them backing them directly.
Just out of curiosity, was your services pointing out to the public Internet? If yes, wouldn’t it be better to use a vpn?
I’m more afraid of them reading about each transaction and selling that information forwards to their partners…