Plenty popular names on there. That's shocking.
It's important to understand which is which for those accounts.
Geeze, I guess we should stop using Google. They've been accused and suspected of much worse by a lot of people. I hope that's not what you meant.
Short answer: Yes. Downloading and running arbitrary binaries from the web inherently a quite dangerous thing do to, and I only feel comfortable taking such a risk with sites I trust. I no longer trust Sourceforge and there is very little they can promise me to make me start wanting to download from them again.
Well, I don't agree¹ with your method of evaluating trustworthiness (which seems to me rather too quantized and "chastity"-minded), but at least you know exactly what you're doing and who you're trusting.
[1] Read as "I believe it's sub-optimal for a given cost-benefit formula, after some assumptions about certain variables and certain opportunity costs, and other methods would likely be more useful in context."
Isn't it a hard fact at this point?
In general, the way the comment was worded? No, suspicion does not equal hard fact.
We were talking about the latter.
It is important to expose this behavior for what it is.
And in the process, remind everyone that abuse of power is a question of WHEN, not IF, whether it's a government entity or a corporate one.