Please do not report security or privacy vulnerabilities in a public issue.

Until a dedicated security contact is configured, use GitHub's private vulnerability reporting for this repository. Include steps to reproduce, affected endpoints or versions, impact, and any suggested mitigation. Do not include real account credentials or personal data.

We prioritise account security, access-control issues, data exposure, microphone privacy, and vulnerabilities that could affect users' wellbeing.