When you have to trust the OS images generated by the authors it becomes a massive issue.
You always trust the developers of software. The only way to stop that is to not use the software.
You always trust the developers of software. The only way to stop that is to not use the software.