If you are worried about accidental vulnerabilities, a review of the code and how previous vulnerabilities were handled is a good measure. But this is time cons

If you are worried about accidental vulnerabilities, a review of the code and how previous vulnerabilities were handled is a good measure. But this is time consuming, and you'd need to know what to look for. If you are worried about intentional malware, I'll recommend building from source and disabling any automatic updates. However, if security is really important to you, then you'd probably want something professionally made, that has a history of handling security issues well which, and which comes with a warranty.