I've some questions about Ghidra released by NSA on Github. And research about it then saw a ycombinator thread for it. That answer was clever and funny.
As title marked, you really okay for just "open source" to trust it?
Open-source has the advantage of more eyes on the code. I trust someone, somewhere has looked. That's all I can do.
Anyone who says "jUsT cHeCk ThE cOdE" should be ignored.