How would opening the source help? If you're worried about their server you can't be sure of what they're running. The private key you send them, in their defense, is encrypted, and the CLI is open source.