Of course everything depends on the user. All risks for safety are born on himself by the user - and has to be. Nobody will undertake them. At the choice of the project you have to rely only on the knowledge. Analyzing independently the project behind the project, you lower risks for yourself to get on swindlers or to be deceived.