Given that running a Hackintosh often still requires using random unverified kexts from the net, I find it somewhat irresponsible to push applications built on

Given that running a Hackintosh often still requires using random unverified kexts from the net, I find it somewhat irresponsible to push applications built on such a system to your customers/users. How can you be certain that none of the kexts is backdoored and the attacker uses this as a vector to add malware to applications?