If the app you use is open source but you didn't build from source, you actually have no idea what code you're running