That why #e2ee, #opensource, #reproduciblebuilds, #community. No point forcing malicious activity if it can be discovered, devs don't need a special status and trust on intermediate components is minimized or ideally reduced to zero.