I never trust software nor hardware that can't be verified.
I trust software to an extent IF it can be verified.
But even so, if there are options to self-host, I will.
If there are options to pull as much responsibility onto myself, I will.
As for hardware, I always custom-flash everything I get my hands on so that the potential attack surface for hardware becomes minimised to, potentially and hopefully, physical backdoors. I then secure said hardware.
If I can't secure something, if I can't trust something, I consider it disposable. I don't consider my sats disposable. And every time I zap something, I mean it, knowing full well what future-wealth I may be giving away.