It doesn’t matter. If the FSB knocks on their door and says “add this extra code to your builds or you’ll disappear into the basement of the Lubyanka”, what do you think they’ll say?
True, but we have the same issue with US-based software, or any closed source software really. At least here I can take the source code and check for myself, or let an AI, before building.