1. Since it's a normal browser extension, the source will be readable and verifiable.
2. It probably uses WebRTC.
It seems Google merely plays an incubator role here for the authors. Either way, I don't see much trust issues that other comments are complaining about.
Looking forward to trying this out when it's released.