You can check the source code of the script.

You can not check the source code of windows.

Who of those could have something to hide?