[E39M5S62]

Same as anything else installed as a binary package - you trust the people packaging/providing the binary. If you don't, build it yourself. The source is publicly available.

[pabs3]

Or you build it yourself and verify you got the same checksum.

https://reproducible-builds.org/