This might not be the response you expected, but the app is only a security risk because it's not open source, and you can't audit its changes when you install an update. :)