Who can guarantee me that this isn't built by some national security agency with some tiny, hidden backdoors?
At least it is Free Software with reproducible builds, so you can audit the shit out of it.
You can also audit it, if you have the skillset.