Also, developers can have an impeccable track record, you could have checked all references they gave you and you can like them a lot personally (in my case, my employees are my best friends), but still how can you be sure you can trust them?
How can you be sure they are not looking for a quick way to be financially "successful" and maybe consider using your IP as a short path to achieve what they want?