Speaking of NSA, libsodium looks nice, but isn't anyone a bit worried that it's still hosted on Github ? That Microsoft is in bed with NSA is common knowledge

Speaking of NSA, libsodium looks nice, but isn't anyone a bit worried that it's still hosted on Github ? That Microsoft is in bed with NSA is common knowledge at this point, and that the libsodium authors choose to (keep being) associate(d) with them doesn't exactly fill me with confidence… (yes, the actual risk of NSA messing with the repository without libsodium authors' knowledge is probably very low, but still, it doesn't give the best impression… )