It's a start. It's good that it's open source, but that's necessary not sufficient to establish trust for something which requires such significant privileges.

It's a start. It's good that it's open source, but that's necessary not sufficient to establish trust for something which requires such significant privileges. You also want to be able to know who the authors are, to evaluate them for trustworthiness, and to evaluate their processes to see how well hardened they are against malicious contributions.