Not much. In particular, the fact that you sign up for accounts under company emails makes it much easier for them to selectively target based on which users look the juiciest. Even if the backdoor isn’t in the public code, it’s trivial to put in logic to have clients receive a different update when signed in with an account marked as “VIP” or whatever.