... it's open source.

Presumably anyone who wants to trust it can audit it. You didn't have to trust it, you can see exactly what it does.