Governor.sol doesn't check for hash collisions, how secure is it?

The execute() here https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/governance/Governor.sol takes several parameters that could be changed, and thus the calculated hash values too.

Some algorithms were developed to find hash collisions, ex: https://link.springer.com/chapter/10.1007/978-3-642-34047-5_25, but keccak256 uses 24 rounds? So it is currently not possible to find hash collisions?

Almost all Solidity contracts rely on collision resistance of keccak256. Governor is no different.