> your statement that your extensions are not malware is not verifiable.

Well, my "malware" had its 5th anniversary earlier this year. So I must be one of the world's greatest malware authors.

Not to mention that I scammed a bunch of members of the tech media into publishing recommendations of my malware.

To be clear, I am not attacking or accusing you of anything - I am just having a conversation about trust in an environment where the vast majority of big players have demonstrated that they shouldn't be trusted.

> I am just having a conversation about trust

It all comes down to trust, I think, not source code. How many of the "open source only" proponents have read and analyzed the source code? How many of them have verified that the shipping product is exactly the same as the source? Almost nobody, I suspect.

A relatively small number of people actually work on open source, even with the biggest, most popular projects. The number of eyeballs on the source is a lot smaller than you might expect.

> the vast majority of big players have demonstrated that they shouldn't be trusted

I'm not a big player, just an indie dev.