Secure means local plus verification
“HTTPS upload” is the wrong story for Instant Redact — there is no upload. Your remaining risks are missed boxes, image-only scans, and leftover files on disk. Treat those like you would after using Acrobat on a laptop.
Authorization
Only alter PDFs you have a right to alter. Redacting evidence you should not touch is still misconduct.
Shared machines
The Worker is local; the download can still land in a public Downloads folder. Save privately, delete.
Aftercare
If the cleaned file must travel encrypted, Protect PDF Instant. Passwords out of band.