Yeah if it’s just a basic input with a function call for spam or not spam the risk is low. What’s the worst case outcome, it tricks it into saying no it isn’t a scam and you have to delete it manually? Hahaha

The benefit here is the software by design can’t read your traffic - it’s using SNI to route, not the host header, so SSL pass thru keeps the payload private. It’s billed as shareable for that reason.

Also this is open source and you can host it yourself.

Edit: I concede BakedCatboy’s point.

In either case I would probably just use FRP.

That’s how you end up with another Zuckerberg!