thedise is a respected modder of gcam, so I would say it is safe from malware, but the question is whether using it is detectable server-side, especially since the last release is from January. I am still able to use it, but I started getting some ads inbetween stories and in the Discover feed.