Khalid ♾️ on Nostr: all who is avoiding ventoy due to security risks - what *are* the risks? Assuming the ...

all who is avoiding ventoy due to security risks - what *are* the risks? Assuming the partitions are encrypted, and the ISO:s are used to boot up linux distros (who also, I assume, verify their checksums before booting up), the only avaible attacksurface I see is the UEFI / BIOS, and that's still quite complicated to pull off. Granted, I haven't compared the github binary to their sourcecode, but being a FOSS project makes it also avaible to be scrutinized by outsiders.