2. We are a team of 10 from Berlin :)
But seriously, you may want to provide some transparency on the web site. Or perhaps a link to github for security-critical components.
All is lost if the master key is leaked through some side channel.
BTW, I totally agree about transparency. We will opensource Anytype before the public release so anyone can inspect and build from sources