Got it. Fedi is acting like a sort of Amber with a browser with window.nostr - I love the idea.
However, Amber is free and open source code and afaik has reproducible builds.
But that Fedi repository has zero code. Just a README file? I don't even know why they have one. They could easily be sweeping people's nsecs and no one would know.