I just looked it up and pangolin is based in the us. Since it’s selfhosted the impact is little but if a government turns bad (and theirs has) it poses a risk. Even if it’s open source I don’t read the code and verify every update. Hmm