"closed source project"

it's a bad move, how can we trust that there are no surprises ?