It's a readable .bat file, and all the executable dependencies are either from microsoft (dism, etc) or offer source code and/or hashing.

At some point you have to trust something, whether it be your software or your hardware.

Besides the telemetry stuff, it's not a trust issue. I just don't have a need for any of the packages I remove. I don't need cortana and search, I don't need Windows Defender and it's cloud features, I don't need onedrive, xbox, modern apps, etc. It's my choice, so I remove them.