Exactly! With open source, at least in theory, anyone can look under the hood to make sure everything checks out security-wise.  but with closed source, you kinda just have to take the companys word for it that theyve got you covered. and  And when that trust gets broken like you said, its tough to get back.

When it comes to my own crypto security and all that, I definitely lean toward solutions that give me confidence, even if it means jumping through a few extra hoops.  I dont have the skills or technical expertise to audit code myself but I can check around to see what the experts are saying, what multiple sources are reporting.  That way Im not relying solely on the word of the manufacturer, especially if theyve lied in the past about security issues.