Something to keep in mind is that you already mostly need such trust. You are using that "social legitimacy" to know you are downloading the legitimate softwar

Something to keep in mind is that you already mostly need such trust. You are using that "social legitimacy" to know you are downloading the legitimate software, or viewing the legitimate source code, or documentation. Your computer can't calculate if ethereum.org is the legitimate "Ethereum", or it's ethereum.io (just making it up).