You mean how am I confirming they're not already scanning on device content for "problematic" things? Maybe because they're announcing they're doing it now? O

You mean how am I confirming they're not already scanning on device content for "problematic" things? Maybe because they're announcing they're doing it now? Or is this supposed to be a gotcha about OSS... because unless everyone builds every binary and every compiler from scratch and starts running xray machines on SoCs "knowing what runs on your device" isn't enough, you need to trust some root authority somewhere...