[SideburnsOfDoom]

> I'm surprised that the EFF would suggest going to the level of having companies publish their code.

That's not the only way. There is precedent of allowing certain trusted bodies a copy of the code to pick through:

http://uk.businessinsider.com/microsoft-opens-transparency-c...

http://uk.businessinsider.com/apple-china-security-audits-ns...