> Yeah - what's more likely - random member of noncommercial OSS build slipping in something malicious or Microsoft doing the same ?

Microsoft, the company that made Windows 10? Microsoft, the company that made Edge? Yeah, I'd trust a random maintainer on the internet over MS any day.