The desktop app runs on your machine. Credentials stay in ~/.objectexplorer and your platform's own keychain, and there is no backend that sees your objects, because there is none.
.msix/.exe are signed; SmartScreen may still popup.
ObjectExplorer is a desktop app for macOS, Windows and Linux. Send yourself the link and open it there.
Use in your browser
npx @knockdata/objectexplorer