That is what makes it "trustless" since it could be audited by anyone. Opensource doesn't have to be free, depending on the license.