Umm, if I extend you thought

I migrate to Knots version 29 for example. Because I felt it is good and correct from what I can test.

Now lukejr does something that is malicious ( for example, not saying he will do) and now I get stuck basically on version 29 and keep running it. Thus having no upgrade possibilities.

If I have to stay on the same version 29, I would choose BTC core and stay there.

Saying that a group of large contributed project is 100% malicious and a single person project is never exposed to have malicious intend would be incorrect imo.

But in any case, run whatever you want. It is your hardware. I am fortunate that I can read and understand the changes on these repo and can make a conscious decision on it.