Comment by croes

One step further, every software you didn't compile yourself and checked the source could have a secret trigger to do harm.

And you need to trust the compiler.