I see, thanks for the answer ! I would rather rely on both a good permission model AND a transparent well meaning author than only one of the two, but I can se

I see, thanks for the answer ! I would rather rely on both a good permission model AND a transparent well meaning author than only one of the two, but I can see how it can be enough. The issue is that even considering that this person is indeed honest (and to be clear I absolutely don't intend to smear them, I have no idea who they are), they can one day decide to stop developing the extension and leave it to somebody else, accept external contributors that might be malicious, etc