My understanding is that the issue with the device upon which OpenAPS relies is that a bad actor could possibly reprogram it over BlueTooth. Doing so would require close physical proximity to the individual. By close to the point that a bad actor could probably physically harm the individual or gain access to the insulin itself...i.e. to within a few feet.
To put it another way, one problem the with FDA approval is that OpenAPS uses a no-longer-approved device and the reasons it is no longer approved are not based on evidence of increased hypoglycemia. Their related to medical device manufacturer liability and hence the cost of insuring against risk.
http://marginalrevolution.com/marginalrevolution/2015/08/is-...
* I can read the code. It's not very complex. * There are minimal moving parts. * I can suspend the pump or disconnect at anytime. * It's changing my basal rates (minor adjustments) not randomly bolusing large amounts. This isn't an "overdose" type situation. * I'm fully in control of my facilities. I'm not a child or an older person - each of which are more likely to have hypos. * I have never had a debilitating hypo in 20 years, I'm not planning on having one now. * The system was designed by diabetics, for diabetics. The closed systems that will come out like Medtronics will be VERY conservative. So much so as to be of questionable use to folks who want an A1C <6%
Because of all these reasons, along with 15+ years of pumping alone and doing the calculations in my head (and getting them wrong) I choose to trust these systems.