Why is this using Unity? That's insane? How do we know this is not malware?

Can’t speak about the Unity part, but why would it be malware? If you’re a dev with street cred, I’d imagine you won’t hurt it by putting out malware.