Yes, unfortunately there is no safe harbor. Companies can make mistakes or add backdoors and we won't know. See this clusterfuck. Open Source, likewise, can m

Yes, unfortunately there is no safe harbor. Companies can make mistakes or add backdoors and we won't know. See this clusterfuck. Open Source, likewise, can make mistakes and (much more rarely) add backdoors, and we could know, but few have the resources to so. See heartbleed.