I wholeheartedly recommend AIMP (http://www.aimp.ru). I've used this player for the last 8 years and it only gets better.
You're right to be worried about what software you run, but Russia is not necessarily the most relevant threat actor. Take this as an opportunity to develop your threat model and apply mitigations where sensible.
On a serious note, there's thousands of ex-USSR coders involved in many important software projects. Does it really worry you? It does worry me as long as the software is not Free or at least Open Source, but then it doesn't really matter where the coders came from.