It is very common situation. You bought a module, installed it on your site, but the module doesn't work. You contacted with module developer for support and got an answer that you need to give full access to your site for this developer. But if somebody gets an access to your site they can do everything with it! Is it safe to give access to your site for the module developers?