Paying or not doesn't matter. In the end, you have to trust them.

The sweet thing about open source is that you can review the code to build that trust.

I wonder how they'd react is someone reverse engineers their app and makes an open source version of it.