The security model is very similar to Voltsge: isolated instances, secret is encrypted on disk and requires interactivity from the user to unlock when the server restarts.

But again, the magic with these things is that you can easily self-host them! 😉