Yeah this is completely valid and I’d already anticipated this, the challenge is how to get things encrypted whilst allow fast search. The system is actually already close to “zero-knowledge” and everything is encrypted at rest and transport but the vector search -> mcp server is the weak link there. The system is setup that you can’t actually create oauth keys if I’m not logged in as the server owner so that’s is secure, but there’s nothing that stops me from being able to change that, so we need to work out one final step, then it just wasn’t realistic for the mvp. However, a zero-knowledge system is the goal