As for the rest, I think this line is key:
> But I was thinking more like a private user who already trusts what I use by default (because I built it)
Of course you trust what you wrote, but do you trust what everyone else writes? Put yourself in the shoes of your potential customers. Most people don’t know you, your values, your intent… all they have to go by is what you tell them. Also remember, people lie. So don’t just tell them, prove it.
And to your point with AI, the ability for someone to make something that was seemingly done with care and to delight, just so they can steal data, has never been easier. Your take away was execution is cheap, but maybe the take away should be data harvesting is now cheap, and that data is more valuable than ever, so people are right to be wary of anything that is accessing their data.