It's runs a mainline Linux kernel so it's possible to compile everything from source without any issues of you want to be absolutely sure. I haven't done so but I did asked Claude to check for anything suspicious and it did not find anything.

I guess a big advantage of constrained hardware with a minimal surface is that there's not that many places to hide something.

Obviously I would not recommend running this if you're in charge of Cybersecurity for Fort Knox but for a Homelab the risk seems manageable.