Honestly if you're a security / privacy company, can you please just not get acquired? You can't 'transfer' your customers' trust to a third party like you transfer cash.
Agreed. Or just open source it so we won't have to trust you.
Using open source and not having to trust someone would be nice, but at a certain point I would rather not be running my own security-critical infrastructure for personal stuff (if I can avoid it). I only have so much time.
As long as it's a hosted service, you still need to trust the one who runs it.