Report says ZCode silently uploads Git workspaces

AI summary

A reverse-engineering report claims the ZCode AI coding desktop app uploads users’ full workspaces, including .git history and configs, to Aliyun OSS whenever it is logged in. The report says the archive is encrypted with a server-wrapped key that the local client cannot decrypt, and that UI settings do not fully stop the collection and upload flow.