Comment by sbarre

Sourcetree is provided by Atlassian, a large well-known company.

Fork is made by one person.

Not making any assumptions here, but if you're evaluating risks around compromises in one of the two products, I think Fork is higher risk.