Sorry for the noob question here but I must ask, as it’s been on my mind for a while. If the plugin code isn’t accessible, how do we know it’s safe? E.g., not sending data somewhere or doing something else malicious.