since fedi is practically just keeping pieces of strings for you (no cryptography as an ecash end user), i guess it’s tolerable. fountain is also an LN custodian with no client side cryptography afaik. as for keet i never used it so don’t know

open source is mostly critical for applications that implement cryptographic protocols, to be able to verify they are not backdoored