Oh, I was confused what thread I was in, sorry!
I woke up to a notification in another thread about F-Droid and open source apps, so my replies to you were all confused until this one 🤙
You are right.
99.999% people just trust the provided binaries.
To more or less reduce that worry, there is a neat feature on github that permits to compile the code directly from their docker instances and let you download a freshly compiled binary.
The geogram code for ESP32 is not so big, it is relatively easy to read for manual inspection: https://github.com/geograms/geogram-tdongle/tree/main/src
Discussion
No worries, already good to read your feedback and know there are more people who care for this kind of tools. Otherwise it does feel lonely writing them.
When everything clicks together, nostr is going to flood with people and the only loneliness you'll feel is empathy with the people you don't have time to reply to in your many notifications