Even for source, you may want to review the patch after applying it. For example, dpkg-source applies patches when you unpack source package. I don't think any

Even for source, you may want to review the patch after applying it. For example, dpkg-source applies patches when you unpack source package. I don't think anybody expects code execution when unpacking stuff, even when this stuff is untrusted.