I am confused! A closed-source-code app cannot be non-custodial. Even if I give the app a NWC link to my own wallet, what stops it from displaying a fake QR and stealing the client's payment? It is ba...
I feel that yeah. You can always test it by sending some sats to yourself or whatever though. If it's closed-source he's probably gonna try to make money off it somehow, and if he destroys his reputation he can't do that, so.