Hacker News Reader

This is true. And you can't be expected to verify the code every time you use it.

It's more of a self-hosting solution I think.

If you selfhost then you trust the server anyway. Can it be useful for forward secrecy if the server gets compromised later?