PhoneCam is a locally run script. If you find a real problem or a security flaw, please report it privately instead of opening a public issue. That said, making it public is ultimately your choice.
Write to filonux@proton.me with a description of the problem and, if you can, the steps to reproduce it. Including your PhoneCam version (phonecam version) and distro helps.