Not discrediting Open Source Software, but nothing is 100% safe.
Of course. I don't understand any of it, but it can't hurt check for a stealData function.