"#UltraReach says their security considerations mean they prefer third party expert review to open source review."
... and we know that "third party" isn't of the Chinese Communist variety ... how? I have no idea what to recommend to Chinese nationals for getting out the Great Firewall. But I would strongly advise them against using anything that doesn't make it's source code public. It's the most basic security precaution there is.