I think it's right to worry about this. However, the Zulip project has a long (10 year?) history and track record with a stable team.