This is the tradeoff. Being backed up somewhere is more convenient but less secure. If it is only on that one device, it requires physical control of the hardware. If it is in iCloud or somewhere else, it is an attack vector and one that can be exploited remotely and at scale.
It's all going to change over time. What matters here is the direction the app is going towards.
Are we going to get more features? Yes.
Are we confident the devs can deliver those features actually secure? Yes, these guys are the ones leading the industry at the moment.
Do we need to worry about long term future of the app being sold? No, the project is a non-profit, it's backed by a foundation, and it's an ideological app, not a for-profit app or con (startup)