Comment by nicce

Open source is also quite meaningless in terms of privacy, unless you can verify that the running binary is build from the visible source.