OSS is not a panacea, especially when there are upstream dependencies. Even things you think are safe can be compromised or enshittified. It happens all the time. The important thing is to take a close look at the indicators.
Right now, as far as I'm concerned, Godot and UE are both very safe bets, depends on your project and business needs. Epic's license is not conducive to retroactive shenanigans the way Unity's was. Epic clearly invests heavily in fostering customer trust.