Good license choice (AGPLv3, the best there is for online services), good code of conduct (for example explicitly protecting things like gender identity and expression of contributors), but effectively headquarterted in Sweden (new NATO member state, member of the Fourteen Eyes, and a government pushing backdoored-encryption laws).
I think the lead dev's heart is in the right place, but by an unfortunate accident of geography it can't be immune to NATO shenanigans. Whether or not that's a dealbreaker is up to the individual.
