First of all I never said that you should not distrust anyone. I said that you should never have to trust a developer of a Bitcoin client that is open source. I think that the DDOS protection feature within XT is innocent, however I do not even need to argue that point, because it does not matter what we think about it in terms of consensus. Since only the block size increase is fundamental to the protocol in terms of it causing a hard fork, It makes the other changes within XT optional. Since anyone can create their own client and make it behave in any way they would want as long as it is consistent with the fundamental rules of the protocol, the only fundamental rule that is changed within XT is the increase of the block size. You can turn off, any of the extra patches contained within Bitcoin XT inside of the client itself. There is even an alternative version of XT that does not include any of these other changes and only increases the block size. You could even run a patched version of Core that implements BIP101, which would then be compatible with XT after the fork if the miners reach consensus.
https://github.com/bitcoinxt/bitcoinxt/tree/only-bigblocks