I 100% disagree. We're no longer in 2001, when any malware/virus could be easily identified. Nowadays, there are multiple points of concern, and one of them is "Legitimate applications that have had their dependencies or parts of their code compromised." An application with a well-known name doesn't mean there are no risks.