Serious question--how does one verify the security and privacy of something like NoRoot Firewall? It wants: - have full network access - view network connectio

Serious question--how does one verify the security and privacy of something like NoRoot Firewall? It wants: - have full network access - view network connections - run at startup That's a pretty serious list of permissions to consider giving something that while it would seemingly be beneficial, is also a great vector into my phone activity for a malicious actor (not accusing them of being such btw).