I have checked Gitlab out in the past, and fully intend to mirror my stuff from Github over to there soon. How do we know that Gitlab, as an open-source projec

I have checked Gitlab out in the past, and fully intend to mirror my stuff from Github over to there soon. How do we know that Gitlab, as an open-source project, can't be infected with the same ideological virus? Should I just start by self-hosting Gitlab so I never have to migrate again?