They says "secure" but it's trusting the website to not deliver malicious JS. Also trusting the numerous third party domains that javascript is included from (and if you block them the entire thing breaks).
Reminds me of <a href="http://file.pizza/" rel="nofollow">http://file.pizza/</a><p>Seems like P2P apps are the new Hello World programs of WebRTC applications.