For those with the wherewithal to run their own server both in terms of hardware and software along with secure backup policies. The likelihood of be compromise

For those with the wherewithal to run their own server both in terms of hardware and software along with secure backup policies. The likelihood of be compromised through missing a security patch or poor configuration is almost certainly massively higher than anything like this. But then where do you get the software for said server? Or your mobile client? We're back to the age old question of how do you trust the compiler? How do you trust the source code? There's a reason that Governments that take security seriously have their own, private, WAN infrastructure that has gateway upon gateway before it reaches the internet, if it ever does.