Conceptually safe, but the implementation is vibe coded and not audited. Better to use for public or semi-public sharing for now. Files are content hash key encrypted and uploaded to hashtree.iris.to blossom server (which also stores to cloudflare r2 cdn.iris.to). Encrypted file chunks are also shared over WebRTC via online peers.