Tbh, I’ve never bothered figuring out how SSHing into an Android device works.

You’re right about the security of older versions of Synching-Fork if you remember to configure it to only do syncs locally (it’s not configured like that by default).