[untitaker_]

At first sight it seems the encryption is done by client-side javascript, so you don't gain much by hosting it yourself.

[herge]

If the javascript comes from your computer (because it's embedded in the page you self-host), how could it get compromised?