Hello again,
Besides what was mentioned in the previous email, I would like to clarify that we commit to open-build-service active maintenance since it is used in production by us.
Regarding security we have already discussed with security team adding a note in the package clarifying security implications and doing recommendations to the potential users on whether running a public instance is discouraged.
Regards