@FediFollows without the source code you can never be 100% sure, but with that many downloads, being hosted on the wordpress plugin database, and having good reviews, you're probably fine.