[_Algernon_]

It only has access to the encrypted payload, while the client has access to the decrypted payload.

[figmert]

The service doesn't deal with encrypted payloads. It just integrates with YouTube's lounge api. As long as a machine is able to run this and is connected to the internet, that should be enough.