Comment by gbmatt

the javascript is run by your browser, so you can fully audit it.