"just" is a little bit of an understatement. the issue here is that you simply can not know if their device is safe because it's closed source. judging from their security and behavior, I would not trust this device.