is this open source software? If not, you have no idea what the bot does and when, and if it has access to the API key that allows you to create orders, it has access to create orders regardless of the currency pair. Binance does not generate API keys for "very basic" trading only on the BTC/USDT pair. It it access to trading, it can attack the account at any time.
I'm not sure how the bot does it but the best way to prevent unauthorized usage of your API, if it's your account, is to whitelist the IP address on where the orders are coming from. In this way, it would be safer. I don't know if the bot does that but Gunbot does it very well.