> Because they have the ability at any point to push software to your computer that compromises your privacy and security in almost undetectable ways. And short

> Because they have the ability at any point to push software to your computer that compromises your privacy and security in almost undetectable ways. And short of them having an entirely open-source OS that will always be the case. We know this isn't true because the contrary to this is how we know this is happening. Even when the OS is closed source, someone can still inspect its network traffic or get it running in a virtual machine and see what it's doing, and then publish the result if they find something untoward. But once your data has been exfiltrated onto their servers, you no longer have any way of auditing what they do with it after that. So the only way to have any assurance of your own privacy is to call any behavior that exfiltrates your data a violation of trust. It might be easier to audit open source code than closed, and maybe then we should be demanding open source operating systems, but there is still a large difference between "this is difficult but possible and so someone in the world could do it and let everyone else know" and "there is no mechanism for members of the public to validate their claims at all".