> Open source helps, but if you didn't build it yourself, you'll need to trust whoever did.

You need to audit the code. If you are not capable of doing that, you need to trust someone to do it.