If the mobile apps have this shady botnet stuff in them, why would the macOS app be assumed safe? I wouldn't trust it either. I'd stick to using a trustworthy VPN client program that's not affiliated with the VPN provider.