That just seems like a weak concern though. The code for the java compiler is open source. The code for maven is open source. So how is Nim safer from spyware?

If I’m concerned about spyware, then my language and compiler are low down on my list. My OS, my phone, and my network are far higher on the list.