According to a ticket in your bug tracker, the source code for Orbot contains binary files for iptables.

To me, this sounds like Orbot is built off of some closed-source code. How then could this portion be scrutinized? Should we be worried about this?