What I am missing in the article: Which are the measures taken making it hard to insert backdoors into the product? I've expected a link to their security pract

What I am missing in the article: Which are the measures taken making it hard to insert backdoors into the product? I've expected a link to their security practices and development process at least. And even then how can I vet this as a customer?