

Our software is basically a web app that makes it easier to install and manage supported third-party apps. Wireguard (currently) is only used for remote access, if you don’t need that you don’t have to turn it on.
For security, everything runs in an isolated sandbox using docker and that also answers your other question.
We do plan to offer a paid remote access service in the future, but it’s totally optional. The same goes for backups, they can be geo-redundant if you use our service, but these are optional feature.
Since the software is open source, we’re not planning to block or restrict anything now or in the future. Right now we’re focused on development, and later we might build some services around it, but the software itself will always be free to use.