Exact amounts of funding/donations are irrelevant. I only mentioned funding at all to demonstrate that a legal entity exists which received those funds and as such, as most reputable organizations, could disclose some aspects without jeopardizing its goals or individuals: feature plans, data protection outline, infrastructure security, some organization structure, etc.