One more phone, same questions. Despite being a developer myself, I am quite a bit far from Android development. However I prefer having something from SlimRoms rather than stock bloatware. But the question arises:
Is there any sensible reason to trust my credentials and privacy to popular software like SuperSU, TWRP, ClockworkMod, custom CyanogenMod builds and so on?
I am also aware that TWRP is open source. Though I have no clue how to build it, and who did it for me with which modifications.
Sorry if the question sounds a bit unethical for somebody.