[Hallucinaut]

Those aren't really the only two options though, are they? If you don't trust software you can run it air-gapped or in an internet-free sandbox.

Moreover good luck trying to verify that everything a website does on the server side is unchanged compared to a binary that's been built locally once.