How to securely and safely update music cataloger

One of the safest options would be to only open the untrusted files in a DisposableVM and only store them in an archive qube. See also: All Secrets in Vault vs. Distributing Secrets.