No worries. I think your concerns are very legitimate and I hope you continue to bring them. I'm just trying to provide some context for everything. Also note that osquery is part of Facebook's bug bounty program, so if you find anything juicy you should report it through the appropriate channels and be rewarded 😉