I am involved in this, what i want to say is that openaps are not the best option anymore, and pumps of metronic are not required anymore, android app & other pumps what we use right now.
Most non-technical people using this DIY solution are probably not even aware of this...
I understand that but the issue remains;
all a hacker would have to do is set basal rate to 100000% and then you have a "bolus that kills you".
Call it basal or bolus, it doesn't matter. The pump just pushes out insulin, and the amount can be controlled if you can hack the system.