"I didn't use Microsoft machines when I was in my operational phase, because I couldn't trust them" ... I'm not really sure that open source should get a free pass in terms of trust - it's not possible for you as an individual to single handedly verify that the open source software is trustable either; you need to assume that the group maintaining it has your best interests at heart.