It’s the same process you would go through to activate with Microsoft. The website explains how each option works. The code is all open on GitHub under the same name. Make your own decisions about who to trust.