Mark can answer for himself on the code question, but just FYI, you could ask the very same question for every piece of code downloaded for every coin out there, including the wallets. A big part of the reason that interaction with us through these forums is so good. I personally would not want to be well known if I produced something with bad intentions. It can have all sorts of ways to bite you in the butt down the road of life.........
Well i am very security conscious when it comes to my wallets and so forth being contained in each individual VM with no interaction with one and another.
Unfortunately that cant be done with a piece of software that needs access to your exchange accounts.