Let's see, on the one hand we have your claim that the developer is honest, which is simply your arbitrary opinion and, on the other, we have repeated instances of dishonesty from the developer evidenced by their attempts to falsely claim legitimacy-through-association by way of registering a UK company only after having been exposed for not even being a legal entity and with false registration details, as well as falsely claiming an EV SSL being issued meant that COMODO CA had validated their company:
So, do tell me how you reach the conclusion that the developer is honest, especially considering that everybody behind this operation is anonymous.