iirc chris titus tools source from chocolaty which is stated somewhere in the gui or description. using a package manager essentially boils down to you trusting them to source the right, trustworthy precompiled files instead of having to figure out yourself which publicly available download source is the trustworthy one. same way youd trust gmail/your primary email provider to be online all the time and thus be able to send and receive mail. if you're using the internet for anything, you're participating in a deep hierarchy of trust, like CA certs for https and websites you go to to not save your ip and session data for brown townysis. or your vpn provider doing that, if you use one for that reason.
