Think of it. The whole purpose of Open Source is to harness the expertise in a community of developers. Without trust, Open Source projects like Linux and others would’ve been dead a long time ago.
Of course CoronaLabs can’t automatically incorporate every Pull request they get. It has to be managed by them. However in my experience looking over code to see if it meets requirements is a lot quicker than trying to debug/find solutions to problems.
We’re also talking about version control software that shows you exactly what the Pull request is trying to do. And like I said above, we’re talking about a plugin interface to a SDK which is not rocket-science in any way.
Luckily I’m an Enterprise user and can code my own plugins if ever I have an issue.