Fair enough, but I have never observed another MacOS user in the wild compile from source.

No matter the risk, every engineer I know uses brew.

MacPorts is the other one and it at least uses some crude bulk openssl signing, but the higher barrier to entry means fewer packages so devs don't use it.