Since it is all closed sourced, how can this be trusted? Aren't we part of the "verify, don't trust" crowd?