There won't be any final info until it is too late. That's the problem.
They can always tighten the security framework in a future update. There are plenty of examples of other corporations doing this.
It's a question of trust. They don't trust me, so why should I trust them?