All the comments I've seen about warning signs point to opencode the cli, where this is about one of opencode's hosted services.