They officially give you SSH access to the device, various GPL-ed source code running on it and have done so for the previous generation too. I'd trust them with it, and even if they were to go against it it's the kind of device where missing out on future firmware releases doesn't seem that bad.