I’m a big fan of trustless computing, which requires apps to be open source, or at the very least, source available.

Trust and security just don’t mix in my eyes, since supply chain attacks are much easier when using a trusted platform vs a trustless platform, where it’s still possible to perform a supply chain attack, but since there are more eyes on it, it is much harder.