Somewhat. But that's a pretty thin link of trust. People change jobs and I doubt the people he knows personally know every line of code either. In the end, he'

Somewhat. But that's a pretty thin link of trust. People change jobs and I doubt the people he knows personally know every line of code either. In the end, he's trusting MS the company as a whole. Generally when I 'trust' open source, it's not a specific person I'm trusting. More so, I "trust" that given the millions of programmers in the world that will look at this code there will be one with similar interests to me that will catch any nefarious bits that slip in. I think these two kinds of trust are categorically different. One providing much more permanence than the other.