How are code changes handled?

Hello, I am somewhat new to btc & curious how code changes are dealt with?

From what I understand the code is open source but there's still a dev team making improvements over time, is the dev team decentralized & how do we ensure there are no bad actors or misaligned influence for the code updates?

Thanks