I’m using Syncthing, though not the Android version. After reading the forum thread, the whole situation seems to be mishandled pretty badly. I wouldn’t feel comfortable entrusting my sensitive data to them after such a sketchy handover process. As mentioned by the others there, it’s suspiciously similar to browser extensions being sold to the data mining / adtech companies.