It's a question who you trust, not a question of the format. Personally, I would only run applications from original authors or projects I trust, and only directly from their download page. Not from some random 3rd party download site or app store. AppImage allows me to do that, with no 3rd party in between the author and me.