Non-profit does not guarantee transparency, look at Mozilla as an example.
This fork is just a bunch of anonymous dudes on internet, who setup PayPal and replaced donate button. Until they do map data hosting, there is not much credibility!
Edit: there are 3th party mirrors for manual download, so I guess they can use those.