From looking at the link, it looks like it just sends information from the device to a web server. It doesn't look like it would have access to anything that any other app wouldn't have access to without explicitly asking for the users permission.
Is there a significant difference between BSD ports vs. Portage vs. Arch Build System? Especially in terms of security I think that they all have the same model.
FreeBSD ports has a ton of packages, though. Maybe they have incredible quality control, but I would bet a few of those have some malware in them. That goes for all Linux/BSD build systems, obviously, just huge ones make it more likely.
The main reason I brought it up is that like the Apple "Store" the OpenBSD Ports (in my case) are a curated selection of software. I do mostly use pkg_add to install, as it is recommended and takes less time, but Ports is more recognizable; I still prefer it to Apple even if I'm not inclined to install everything form source like Gentoo does. The main difference over the Arch Build System in my experience is that most (all?) of the packages are also in Ports. Arch's AUR was/is helpful but my experience with it was always sloppier and I've grown disillusioned with user maintained packages and build systems.