Have you read all the code though? Everyone assumes that somebody else will read every single file of the source code, and understand it all. Malicious code can be obfuscated.

Maybe there’s something in the codebase that sends all our data to North Korea… who knows.