That might be a digression, but overall you have to "trust" a company or software provider to some extend. Even if you have all source-code etc. there are alway

That might be a digression, but overall you have to "trust" a company or software provider to some extend. Even if you have all source-code etc. there are always possibilities to include a backdoor or similar if there's one binary involved (in this case the compiler): http://wiki.c2.com/?TheKenThompsonHack http://wiki.c2.com/?TheKenThompsonHack