If someone else's account is compromised, you would not be, because apps are logically separated. There would be no way for the compromised or uncompromised account to ever see your data.

If Instant is compromised, then that's a lot more dangerous. We minimize this risk following security best practices: keeping data encrypted at rest, keeping secrets hashed at creation time, etc.

▲

oofbey 11 hours ago | parent [-]

Oh they’re logically separated. Thanks for explaining that. Now I’m certain nothing could possibly go wrong.

	▲	straygarr 4 hours ago \| parent [-]
		"logically separated" as opposed to "physically separated" (pretty rare in the Cloud world) If you want more details, read their open source codebase or ask them specifically what documentation would boost your confidence, instead of leaving snarky comments.