It always comes back to trusting trust [1].

[1]: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...