You have to rely on a distribution that has a many-eyes review policy and has security conscious users.