But somehow people trust telegram and thousands of other apps.
No its not about open source
Aside from Telegrams own insistence that their crypto protocol has been independently verified, do you have another source? My understanding was that nobody has actually bothered to verify telegrams source code: https://security.stackexchange.com/a/49802