They've talked about client sided signing before.
If you don't trust the devs then it's easy to run your own node and only transact from there.