It does what I need (for instance decrypting Amazon purchases), runs locally and will only process trusted input, not to mention it seems to be gradually migrated to Python 3. I’m not overly worried.

For an upcoming competitor, security is only a feature if it also does everything else I need it to.