I mean if that's your threat vector you cannot trust anything nor anyone ever about anything at all.
The dude you just shook hand with might have had a glove and stole your finger prints. The post employee you just gave your check to mail might be a impostor. The guy you're about to meet from craigslist might steal your iPhone and cut your thumb to access your entire digital life.
Ah but no, you're an average Joe and nobody gives a flying fuck about any of these.
Even if the software is totally open-source: unless you also made the hardware: it doesn't matter, unless you compiled all of it (and at that point probably wrote the compiler yourself as well as the os you're using) and installed yourself: it doesn't matter, unless you actually went though every single line of code and checked for yourself that every thing is safe (which you cannot): it doesn't matter
My point has nothing to do with absurd conspiracies, but that technically, I repeat :technically, given enough motivation and resources which probably only governments have, there are ways to defeat encryption by planting backdoors into closed firmware so that data is being read before it even reaches the encryption layer. It's very hard to do, but it's 100% possible. You think the USB driver managing your keyboard doesn't have access to all text you write, including passwords? Well, have it talk using a covert channel with the blob running into your network card and all your text is magically sent elsewhere. Again: hard, still possible.
The dude you just shook hand with might have had a glove and stole your finger prints. The post employee you just gave your check to mail might be a impostor. The guy you're about to meet from craigslist might steal your iPhone and cut your thumb to access your entire digital life.
Ah but no, you're an average Joe and nobody gives a flying fuck about any of these.
Even if the software is totally open-source: unless you also made the hardware: it doesn't matter, unless you compiled all of it (and at that point probably wrote the compiler yourself as well as the os you're using) and installed yourself: it doesn't matter, unless you actually went though every single line of code and checked for yourself that every thing is safe (which you cannot): it doesn't matter