Comment by cperciva

You don't need to trust the code on the server -- that's the point.

You can compile the client code yourself. In fact, until recently you had to compile the client code yourself.