Since it's webassembly, I wonder if it can be made to work completely on the client with something like Orca (https://orca-app.dev/) so you don't even need to trust the website.
I've been thinking about a standalone version for a while, but haven't gotten around to it. You could use the vscode/codium extension and disable auto updating for a similar effect.