This is a great day to re-read Ken Thompson's "Reflections on Trusting Trust":

>To what extent should one trust a statement that a program is free of Trojan horses? Perhaps it is more important to trust the people who wrote the software.

https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...