Your explanation sounds reasonable.

Has been bitten before by an open source (I think) program that was for taking screenshots but that forget to mention it would also, by default, upload them.

Be very cautious when working with new software in sensitive settings.