There's no reason to trust it from a technical perspective either. The app is unsandboxed. Easy enough to check from the CLI.

    codesign --display --verbose=4 Refine.app 2>&1 | grep sandbox

Apple provides a network client entitlement[1] that sandboxed apps must have, to connect to the network. Since this app isn't sandboxed, that restriction doesn't apply.

Personally, I only use software that was either built on my machine or downloaded off of the Mac App Store (MAS apps have the be mandatory sandboxed).

[1]: https://developer.apple.com/documentation/bundleresources/en...