Many experts advocate for a "hybrid model"—rely on verified addons for production or commercial work, but feel free to experiment with unverified, open-source addons inside an air-gapped machine, provided you audit the code yourself.