I am really uncomfortable with them, but there isn’t a clear alternative given that our computing environments are designed in a way to be inherently insecure, patching exploits as they occur is the only plan other than not using the internet. But it means that the people with the keys to the software can install what they want on your computer and probably take it over. You could check every update yourself and compile it from source yourself if it’s open source, but that would be too much work.