If you're rolling out anyone's code and not doing a full security audit on it, it's your problem, not theirs. If you're that worried about it, audit the code yourself, and fix or ask questions about the things that concern you.

You are not being paranoid for the right reasons.

MrCromeDome