In the umbrel scenario there are a load of projects that would be impacted by autopopulating funding sources. I would say Umbrel is responsible for not creating backdoor. As I said we can also add safeguards fkr that scenario.

yes, he tagged you because he wants the same problem fixed in lnbits. the lnbits umbrel app is completely unrelated to the alby hub umbrel app it just has the same setup and potential exploit