I have to confess that I was not aware of this, thank you so much for letting me (us) know. It's interesting, and shows why taking the time to research software as well as the devs in charge is so important. I did not see any red flags other than the way the handover has been handled though.

I get it, and I am well aware you're correct about the risks, but the infrastructure I'm running doesn't really allow me to go without it at the moment. I did stop the updates in my Obtainium entirely.

The good news is that this just came up: https://github.com/nel0x/syncthing-android/releases

So, it's looking bright right now.