There's no malware in it currently, but I understand your concerns - I could be lying, go rogue later, or just get my access stolen.

One option is to vet a version yourself and disable auto-update, but that's not really feasible to spend time on for most people.