[simonb]

His main argument boils down to: there is a risk because I don't know and/or understand the code; but with the reference source code being public, this is his limitation, not the system's.