Building on your statement: Isn't that kind of the proposition of open source anyway? That you can look under the hood and *see for yourself* if it is as safe as you need? And *change it yourself*?
Versus commercial software which very obviously has certain legal and ethical obligations.
(I realize commercial software *can* be open source, but delving into those distinctions is not relevant to the point I'm trying to make)