Please report sensitive security issues privately to the maintainer instead of opening a public issue.
MPlusForm should remain a transparent addon and optional sync client. Changes should preserve the documented safety model and avoid behavior outside normal addon files, local text logs, and the configured sync API.
Do not commit local configuration, credentials, logs, generated runtimes, or release binaries outside the documented release process.