Hmm someone a Microsoft guy?
Opensource has a rather helpful side to it: you don't have to give a damn about a company that hides source code.
The code is there available for anyone to look at.
Then you can be lazy and let someone else audit it
Thus a diff is all that is needed for a new version.
I am certain someone would have found any wallet stealing or auto coin transfer is the original code by now ...
If you don't trust that statement - you shouldn't be here to start with.