Yep, gotta trust the dev and/or everyone who examined the code.