By default, Condenser keys are only in the browser and do not leave the browser. Is it possible to rewrite the engine to send the keys? Probably yes, but here is where the 'problem' arises that Condenser only works with Private Posting Key. This means that even untrusted pages are (quite) safe.
Of course, Whalevault is worth using.
Another option (even safer) is to have your own Condenser for private use. Perhaps I will prepare such a package in the form of a *.exe file or similar.
so you could say that your site is safe just as blurt.blog is safe and other condenser-based sites and yet someone is trying to discredit your initiative
FUD LOL
There are individuals who will create FUD and this is the norm unfortunately at Blurt. On the other hand, don't be surprised if we develop projects in such a cheap way, it will turn out that the Blurt Foundation is just spending money.