There's no good solution for that problem yet. It's still in some sense better than centralized trust, because you can in principle understand the contract code

There's no good solution for that problem yet. It's still in some sense better than centralized trust, because you can in principle understand the contract code. But we need to develop much better tools for auditing. Fortunately that's a really fun and interesting problem to work on!