Read up on private compute cloud, the transparency log and published binaries, the VRE, use of oHTTP proxies …
And then come back and tell me that there is anyone else going through such hoops (at not charge) to make sure they know nothing about you and you don’t need to trust them for the system to work