We have to have some level of trust. Otherwise we will need to manually and personally verify each line of each software that we use. And unfortunately this is impossible.