[mrzimmerman]

That’s true of any software you’d use anywhere if you accept the updates of the creator. Linus Torvalds could accept an update tomorrow that surveils people’s data and YES people might notice but plenty of people just accept updates and move on (if you’ve done code reviews you know how arduous multi-hundred or thousand line contributions can be to review).

My point is we've already been taking the same risks and the only reason it’s something now is because it’s a transparent process. It’s always a “trust us” scenario unless a person routinely scans all software they is and all updates for malicious server calls or some other kind of recording of data and maybe opening of a back door.