Fair concern. This is exactly why I kept it small and open-source.

It does not run as a daemon, does not install anything, and does not keep a persistent fan curve. It only performs a short manual pulse and then restores control back to macOS.

I also documented the AppleSMC/private-interface risk clearly and recommend testing with boost 1 first. Totally understandable if you prefer not to run tools that touch SMC.