It's like any open source project that can be inspected, and it's not in the interests of the project or stakers to screw users. There's testing on testnet to catch bugs