I was just about to post this, I'd love to see someone audit their codebase all these claims are super cool and all, but things like these really make it hard to take them serious.

Especially when issues like these: https://github.com/shadowproject/shadow/issues/25 pop up.

"There is no way to contact you on the bug bounty program"