I can't imaging a project aimed at reverse engineers would be the best place to try to hide that sort of thing. Ghidra is open source, you are free to audit and build it yourself if you are concerned.
Not to take away from your point, but a lot of "career" reverse-engineers are no more knowledgeable about the details of their tools or the low-level than developers.
> Ghidra is open source, you are free to audit and build it yourself if you are concerned.
^ the manyeyeballs fallacy
I don’t think the many eyes fallacy states that code audits are impossible or useless.
but it states that nobody (as in nearly not enough people) does it