@normis has repeated this claim a few times. See How to install Winbox on macOS
Mikrotik certainly does recommend downloading other third-party things (e.g. Cloudflare, which creates a tunnel to internet using closed-source software and third-party networks) without much warning. So what’s the difference with auditable public GitHub project that redistributed by brew?