This is a private battle, we doesn't try to enter on it.
I will recommended everyone to doesn't give your original site's details/access to your web developer. Just make a copy of a original website to a separate web hosting or on a sub-domain (like test.example.com), create a FTP account pointing to this sub-domain and a separate MySQL database, give all these details to your developer. When they finished it, then ask the developer to give you all editing details and full direction that how you can do it on your main site, so you can manually add all those codes yourself, don't rely on others, world is full of scam and Internet is the first of them.
I think this method would help you all.
I will recommended everyone to doesn't give your original site's details/access to your web developer. Just make a copy of a original website to a separate web hosting or on a sub-domain (like test.example.com), create a FTP account pointing to this sub-domain and a separate MySQL database, give all these details to your developer. When they finished it, then ask the developer to give you all editing details and full direction that how you can do it on your main site, so you can manually add all those codes yourself, don't rely on others, world is full of scam and Internet is the first of them.
I think this method would help you all.