Obsidian cannot access your notes even if you use the Sync service (it's end-to-end encrypted)

Is it open source? Can anyone confirm that? What keeps it from changing in the future? I don’t have anything crazy sensitive, but I’m mindful of getting my info sold to advertisers.