The thing about this is that it's open source - so anyone of sufficient experience can inspect it and verify that it's safe to use. That benefits users like you in that they'll make a lot
of noise when something's wrong. All of the source code, specifications, scripts, logs, everything is open for inspection. By design and intent.
It's the software that has no
source code that you have to worry about.
"OSes" like this are just respins of existing distributions - they've just chosen different software packages from the original default.