And this is why open source, combined with trusted repos is the way to go. Granted, I do have a few closed source apps (Steam, games, Chrome and Opera contain

And this is why open source, combined with trusted repos is the way to go. Granted, I do have a few closed source apps (Steam, games, Chrome and Opera contain open source bits but are also closed source), but those are apps I mostly 'trust' (I don't trust them 100%, but then again I'm also not pouring through the Linux kernel code). Best way to avoid scams is common sense (if something looks dodgy, it probably is).