This is obviously an issue. Users are never going to read and verify every line of code that comes over the wire, so in the end it comes down to trust and vigil

This is obviously an issue. Users are never going to read and verify every line of code that comes over the wire, so in the end it comes down to trust and vigilant sysadmins.