They are amazingly good at creating hype (non-derogatory) and getting users.

Their docs say "Omarchy takes security very seriously" - I think that's straight up incorrect.

Saying "go and use it, wanting: its prototype quality and likely to have many security bugs" would be fair game.

That's not what they're doing.