It would appear that the "party of reasonable size" here is China or Russia, not a corporation.
The problem goes much deeper. It could be any "larger" corporation or government or other entity having enough manpower. It could even be parts of a corporation or government entity.
However which way you put it, a program of which you don't have access to the source cannot be trusted.