This is naive. Of course they would not do the obvious. But for a group of knowledgable persons it is easy to implement some "errors" that go unnoticed long enough to inflict serious damage.

Only a tiny fraction of all bitcoin users is able to understand the source code. And of this tiny fraction only few do actually verify it.