I paid other humans with security expertise to "soft audit" the program prior to release, which uncovered a variety of vulnerabilities which were patched.

It's a courtesy to the users, especially self-hosters.