I'm always curious how can people get so confident about Apple's security practices, given that none of the parts are open source? Is the trust solely reputatio

I'm always curious how can people get so confident about Apple's security practices, given that none of the parts are open source? Is the trust solely reputation-based?