You just don't get it. It's a critical system tool that's being discussed here. For someone serious about their privacy, it's a valid point. It's not open source nor is from a reputed enterprise. What's preventing the developer from adding a key logger or so?