As said, independent of the OS, every soft, add, extension, script you install without checking it, is an Malware vector. Windhawk even advice to check the script before you active it. All scripts are full listed in the app. There is nothing hidden https://github.com/ramensoftware/windhawk