And anyway the only "compromise" that you'd likely to see is unwillingness to compromise encryption, or help police violate privacy. Doesn't sound bad to me
The comprimise I fear is a seemingly innocent bug that leads to the unauthorized access of a database.
I'm not sure why you assume BLM would be responsible for such a thing, versus a white nationalist, or a foreign government, or a random Joe. Also not sure if you're suggesting 'seemingly innocent' to mean actually innocent or intentional
As mentioned I would hope that politics would be kept seperate from the software, which would mean you might not know your co-contributors affiliations and so reduce the chance for any coordinated effort that might affect its integrity.
& yes an innocent looking bug, that is intentional.