BTW, just to make it clear, in the case of jiratui you can also download from github repo directly and inspect the code if you wish :D

> they could also send it somewhere

Run JiraTui in a container / bubblewrap, and only allow it to connect to the Jira API host:port.