It all comes down to how much you trust the tinfoil developer as it is closed source. The original incognito is safe if you remove the backup it creates, so is the rcm. i.e no one can read your backup and spoof your console info to get new games for their pirate shops ( like jack in the shop) that tinfoil/hbg shop use.
this new addon to tinfoil, seeing the back up it is stored on the nand leaves noobs open to having their info stolen and used, resulting in a console ban.
I don’t think Blawar is doing this but there is absolute potential for it to be coded into the software without our knowledge. Also note this unscrupulous practice was done in the 3ds scene by one of those who took over the free shop development when the pedo developer got busted and retired.
My advice, use rcm or the original by Blawar and then remove your backup from the console.....Blawar has put encryption on the backup file saved in nand to prevent other software stealing your info so if you trust him/her use it.
I can’t trust myself at times, so other people will always scare me. You never know what can possibly happen. Removing your backup leaves you open to no one.