Whereas you feel safe with American companies which hand over everything on you to NSA and FBI as they do not risk to end up in jail.
Come on, OrangeUI is probably an individual who sells his product.
I am sure all of us have bought components from such individuals in the past.
And, really, would you feel more comfortable if the site was in English and the download link was a direct file? or if the domain was orangeui.com?