Apparently you just need to trust GCHQ, who advised them. There isn't another agency privacy minded people would rather trust (apart perhaps its US and Chinese equivalents).