Hey @Elextric! Thanks for posting, and glad to hear you are enjoying monday.com so far.
With regards to your first question, monday.com does have access to attachments and data used on your boards, but customer data is treated as a “black box” and is generally not accessed for the performance of our service. Access is granted based on the need-to-know principle and its purpose is outlined under section 3.1. (Customer Data) of our Terms of Service: https://monday.com/terms/tos
For example, for the purpose of troubleshooting user reported issues, we may request written consent in order for our R&D department personnel to assist with troubleshooting.
Regarding your second question, we’re not able to endorse third party apps’ security or protocol. Please feel free to check out this article for more information! Understanding apps marketplace security
Let me know if there’s anything else I can do to help!