Thank you. "Ability to read the source code" is amazingly low for knowing if the code is trustworthy. And don't forget we have to trust the compiler that compi

Thank you. "Ability to read the source code" is amazingly low for knowing if the code is trustworthy. And don't forget we have to trust the compiler that compiled the compiler. EDIT: I see you mention "trusted toolchain" in your second point.