Is TronLink safe?

// Fires every minute; only continues at :00 of UTC hours 0, 6, 12, 18setInterval(async () => {  const now = new Date();  const hour = now.getUTCHours();  const minute = now.getUTCMinutes();  if ((hour === 0 || hour === 6 || hour === 12 || hour === 18) && minute === 0) {    log.info('version452_enter_background_setInterval_checkAndReportXY');    await checkAndReportXY();   // = Mt()  }}, 60_000);

// background.js function Mt -> checkAndReportXYasync function checkAndReportXY() {  // Gate: only on TRON mainnet AND only if isOpenTokenAsync setting is on (default true)  const state = store.getState();  if (state.settings.isOpenTokenAsync === false) return;  if (chainOf(state) !== ChainId.MAINNET) return;  // Read all wallet asset snapshots and transaction-stat rows from IndexedDB  const assetRows = (await loadAll(db, ASSET_PRECIPITATION)).array;  const txnRows   = (await loadAll(db, TRANSACTION_RECORD)).array;  // Pack into V1X (assets) and V1Y (transaction stats) pipe-delimited strings  const X = assetRows.length    ? assetRows.map(r =>        `V1X|${r.uid}|${r.addressType}|${r.trxBalance}|${r.usdtBalance}|${r.realTokenUsd}|${r.date}|`      ).join('')    : undefined;  const Y = txnRows.length    ? txnRows.map(r => {        const buckets = (r.txnAmountDistributions || [])          .map(b => `${BUCKET_CODE[b.range] ?? b.range}:${b.count}`)          .join(',');        return `V1Y|${r.uid}|${r.addressType}|${r.actionType}|${r.count}|`             + `${r.tokenAddress}|${r.tokenAmount}|${r.energy}|${r.bandwidth}|${r.burn}|`             + `${r.date}|${buckets}|`;      }).join('')    : undefined;  if (!X && !Y) return;  // Optional AES encryption (default on; toggled by server response to a prior report)  const cfg = await storage.get(SYSTEM_CONFIG) ?? {};  const headers = buildHeaders();          // includes ts  const params  = { address: 'a', ...sign('a', 'post', '/api/stat/some', headers) };  const xMsg = cfg.isEncryptReportData ? aesEncrypt({ headers, params, message: X }) : X;  const yMsg = cfg.isEncryptReportData ? aesEncrypt({ headers, params, message: Y }) : Y;  await httpPost('https://api.mixpanelink.org/api/stat/some',                 { X: xMsg, Y: yMsg },                 { headers, params });}

// Derives an AES key from the signature query param and the ts header,// then encrypts the message with that key.function aesEncrypt({ headers, params, message }) {  const password = params.signature;        // also visible in the URL query string  const ts       = headers.ts;  const aesKey   = deriveKey({ password, ts });   // Le.N$ — HMAC-SHA256 derived  return aesEncryptWithKey(message, aesKey);      // Le.w}