That's great! It's good that you have both the technical knowledge and the wherewithal to compile from a known good source. Unfortunately, the vast majority of people don't, and in many cases it is not possible to do so.
Feel free to prove anything I've said wrong, but I'm pretty sure I'm standing on solid factual ground here.
----------
I am asserting that it is not good security practice to run binaries found from unofficial sources on a message forum. I am much more strongly against this practice when the download in question is a replacement for your entire operating system. Feel free to argue that point if you'd like, but first, consider what makes these devs "recognized" and "trusted" in your mind. A year or two of good behavior with posting roms?
Think of all the high-profile attacks that have happened, especially lately. You ask if I really think they would do this, while I ask:
* Do you really think there are no hacker groups out there who aren't dedicated enough to spend a year posting useful roms to build credibility?
* Do you know how much money could be made from the personal information/credit card numbers/social security numbers...etc, held on our phones? The number is measured in billions a year, and that's in the U.S. alone.
I wouldn't trust an otherwise random username on a message forum with something so critical, especially when violating my trust could make him/her a millionaire.
----------
I wish it were that simple. Let's look at the most popular, best-case scanerio, Cynogenmod. From what I can see, there are over a hundred commits to Cynogenmod a day. On one particular Cynogenmod release for an older phone, there were only 4 watchers subscribed to that particular branch of code. By my count, there are over 200 devices currently officially supported, and many that aren't.
Even in the best-case scenario, it seems to be a risky endeavor.
Image