That’s one of the advantages for those interested in ZTN. In a somewhat similar way to IPv6, a local address/network isn’t inherently trustworthy.

You can generate your own “debloat” scripts with https://privacy.sexy

I think the project has a better chance than most at being relevant long-term for a number of reasons, but also the maintainer is a pretty cool person!

I understand the sentiment about the inherent conflict of interest with paying someone to audit your software, but it’s highly unlikely that anyone is going to do that work for free. I’d want some evidence before taking your comment for anything other than opinion/bias. I don’t use any of these products so whatever the reality is doesn’t affect me, it just seems like nuance is too easily lost.