Everything in TeXbrain runs in your browser. No server of mine sees your documents. The only things that leave your machine are the names of TeX Live packages your document needs, and, if you use git, your repository data on its way through the CORS proxy to your git host.
If you find a security problem, please don't open a public issue. Use the private vulnerability reporting under the Security tab of this repository and I'll get back to you as soon as I can.