Controversial question: can you trust clickhouse? After the JetBrains hack I'm starting to think if I should question any software that's coming from east of Europe (even if the org is legit).

AFAIK there was no evidence that solarwind fiasco was because of jetbrains [0], also the clickhouse is open source [1] under apache2 license and you can check the source and question it by yourself.

[0] - https://www.zdnet.com/article/jetbrains-denies-being-involve...

[1] - https://github.com/ClickHouse/ClickHouse