It isn't a random user. The author of the repo has quite an online presence and track record. My top choice, all other things equal, is open source code but I

It isn't a random user. The author of the repo has quite an online presence and track record. My top choice, all other things equal, is open source code but I know I don't read all the code and rely on a trust network. A lot of open source code is distributed as binaries these days, in go, rust, docker, and others. Developers have an option to download the source and compile it ourselves but they don't always do it. It's convenient to be able to download a self-contained binary. I'm not trying to spin it, just to point out that I'd have an easier time trusting this than I'd have trusting many open source projects.