That's why it's good to have a working open source project, that way the public can audit the code. A lot of ICOs don't release the source until much later though.
That's not enough. Of course it is good to have your code open, but how about people that do not know coding? They would be just lost around the computer language.