>"If "verifiable source" is the tradeoff required, so be it."
How are you equating a company telling you, in order to have a secure device we will not be sharing the source code?
Aren't you just accepting the "trust me bro" attitude, because the company told you it's more secure if they don't share the code?