I never really trust a binary provided by someone which also talks to a server operated by the same entity. There is no way for me to audit an arbitrary binary

I never really trust a binary provided by someone which also talks to a server operated by the same entity. There is no way for me to audit an arbitrary binary (or application with source, in any reasonable way), particularly since it is regularly updated on both ends.