This looks a security concern for me. As I understood, the addon will try to connect to apsona server and download something, how can we trust those download codes?