OSS is not a panacea, especially when there are upstream dependencies. Even things you think are safe can be compromised or enshittified. It happens all the time. The important thing is to take a close look at the indicators.
Right now, as far as I'm concerned, Godot and UE are both very safe bets, depends on your project and business needs. Epic's license is not conducive to retroactive shenanigans the way Unity's was. Epic clearly invests heavily in fostering customer trust.
Yes! This is why the hate I see for Epic (or non-Steam in general) bugs me so much. Epic has done nothing but right by developers. While they could definitely make their storefront/app better (and they claim they are working on it) for the customer experience, I have nothing but respect for them as a company.
I will still buy games on Steam first, given a choice, but that is only because I am now a staunch acolyte of the Steam Deck, and installing via Steam is much easier than trying to get EGS games running on the device.