Before the patch, the Barfi Index operated as follows:

The Patched app is widely regarded as safe within the enthusiast community. The Barfi Index module itself does not inject code into system partitions; instead, it utilizes the Android Overlay Manager. This makes it a safer alternative to Magisk modules that modify the SystemUI directly, as it is much harder to cause a bootloop.

Yes, but only under these conditions:

If you cannot verify the patch’s authenticity, wait for the official release. A broken index is better than a compromised machine.

The development team has released Hotfix v2.4.1 to address these issues. Here is exactly what the "Barfi Index Patched" update changes:

Several developers are building a peer-to-peer relay that captures raw tick data from a user’s own broker API before the broker applies the normalization patch. By using a VPS located in the same data center as the broker (co-location), you can theoretically access the "dirty" data stream for a few more months. However, this violates most broker Terms of Service.