Implement some sort of E2EE

[McSinyx]

The authentication and authorization are useless if any sysadmin can have access to all of the data. In other words, third parties (us) need not to be trusted.

[Huy-Ngo]

I thought in our case the sysadmins are supposed to have access to all the data?

[McSinyx]

They're supposed to, and thus throw all of the privacy (as in the noun form of the word private) out of the window. The current sysadmins can be trusted (or can they 😈), but there's no warranty in a more generic context.

[Huy-Ngo]

I mean the contents of the projects (mostly) are going to be published anyway, there's nothing private here.