Show HN: SHH (Systemd Hardening Helper) – Automatic systemd service hardening

Very cool, but I'm generally weary of these tools because it seems trivial for a creator to deliberately insert vulnerabilities into a random script on github that claims to "harden" systemd?