I think I'm one of the most "vibe coded stuff can be okay" people on here.

But the codebase looks to be fully LLM written without implementation guardrails.

Something claiming to be fully private and offline with this mentioned just at the very end as a half sentence in the credits I see very critical.

And it of course has full internet permissions because of the model download. Which makes sense but removes the only hard protection android offers.

Just flying over the repo and code just gave me ... Bad vibes.