While that is all true, Skunk, I would suspect Petrah's claim was based at least partially on the dearth of other reports. One data point does not make a trend.
These boards see a whole lot of "I just installed your addon and now I'm hacked". This was just another example of it, and probably the first "I just installed Minion and now I'm hacked". If there were weeks of additional data points supporting either claim, I'm sure the responsible author would pull the code down and take a closer look.