As another question: Why was Etesync added (just reviewing Remove EteSync)? They admit there is no professional audit: Get the protocol professionally audited · Issue #1 · etesync/android · GitHub, and the thread suggests the product has been deprecated.
I mean all of this with the best of intentions: I deeply want there to be incredibly technical, high quality guides for secure products. And, it is great to have companies work with you to improve their products and the criteria. But, it is easy to lose faith when we are doing that - working through the issues and meeting the criteria.