I'm a bit puzzled. Let's say I decide to not download the binary but build it from source. Unless I actually read the source, I'm trusting the community to have read it, which consists of other people thinking I have read it.

In my view, this is true for the OS itself. So unless I read everything, I'm fucked. And I don't. Thus I'm fucked.

Do I miss something?