Comment on: Security/privacy audit note

Really cool project, and I mean this in a friendly heads-up way, not a drive-by dunk. A bit more detail on why I called these out: - The Worker is doing the right job in principle by keeping secrets out of the binary, but without any auth or rate limiting on the Worker itself, anyone who gets the workers.dev URL can proxy requests through your Anthropic, ElevenLabs, and AssemblyAI accounts. - The PostHog events currently look like they can include full user transcripts and full AI responses. Since the app also looks at screenshots, that creates a decent chance of collecting sensitive user or work content in analytics. - The OpenAI transcription fallback appears to rely on an API key embedded in the app bundle, which weakens the otherwise solid keys-stay-server-side architecture. The good news is these feel fixable without rethinking the product: 1. Add a thin auth layer or signed request scheme in front of the Worker. 2. Redact analytics down to counts, success/failure, and timing ...