Comment by EMIRELADERO

It's a matter of trust and good faith. You could apply the same dichotomy to actual FOSS programs.