Why? If you don't trust your Linux distributor then you need to find a different one, but I don't think the answer is compiling everything from source; speciall

Why? If you don't trust your Linux distributor then you need to find a different one, but I don't think the answer is compiling everything from source; specially if the upstream project doesn't support 100% your target distribution. See: http://www.debian.org/security/ http://www.debian.org/security/