I’ve been meaning to look into them a little more closely. The investor capital is a red flag, but not necessarily a deal breaker. Something that would increase my confidence would be open source code to demonstrate how they’re handling data (e.g. what have they prevented themselves from even having access to in unencrypted form).