> it's not open source, so you still have to trust the app (and the OS) not to send out your private key.

Or that it actually implements encryption correctly.

Closed source is really not an option. Let's get it right this time.