Correct me if i am wrong but isn’t root trust authority like physically audited? If yes every browser /os who trust them is an accomplice, and much worse than F

Correct me if i am wrong but isn’t root trust authority like physically audited? If yes every browser /os who trust them is an accomplice, and much worse than Facebook, this is plain theft of everything a user does ever.