Comment by leeoniya

> In Tarsnap I might take this to an extreme — in addition to the aforementioned encryption, I encourage users to read the tarsnap source code rather than trusting that I got everything right

You still have to trust that what's running on your machine and on the servers is compiled directly from the source you have access to, right?