Its not that scary because their patch sets form part of several other browser forks (ie cachybrowser but also several others) so they get a decent amount of scrutiny