I find it's much easier to audit the source code, and build the binaries yourself from that code. Also, it's a collaborative effort. If you build your binaries

I find it's much easier to audit the source code, and build the binaries yourself from that code. Also, it's a collaborative effort. If you build your binaries from the same sources that other people use, then you can split up the work, and you all benefit from anyone's discoveries. Obviously, we don't have perfect verification of the code we run. People can overlook things. Compilers can be subverted. Operating systems can be pwned. Malicious hardware can undermine all of our efforts. But let's not let perfect be the enemy of good, and let's not fool ourselves into thinking that faith in a corporation is a substitute for transparency.