Hi and thank you for your warm words!
I agree that having your personal email in clear in a public DNS records is not great (and goes again the privacy statement), but I can also understand the appeal to the Open-source ideology :)
For information, we are discussing on our end about ways to improve our transparency and show our users that we are not storing any emails or selling them or anything like this. It's easy to say it on the landing page, but that's not proof.
Right now, we are thinking about hiring an audit firm to do that work and certify that our words are true, we think it's the best thing to do.
I think it's even better than open-sourcing our code because we could publish our code, crying out loud that we are open source, but still run an alternative version of our code on our server. You can't verify that. But an audit will clearly prove what's going on under the hood.
We have three core rules we like to follow:
1. An easy to use interface
2. A fast and awesome support
3. Respecting the users (or, the way I put it, be able to face myself in the mirror in the morning)