That is a valid question.

But that would apply to any app that deals with files like this one does.

This one is open source and we can run some code analysis on it, compile locally, etc. I am not well versed in security checks but I guess you get the idea.