even Schneier thinks they do a decent job: https://www.schneier.com/blog/archives/2013/04/apples_imessa...
There might be a backdoor in the cpu you buy, or in the baseband, or in a driver, or in an open source component that you didn't audit, or in your compiler, or even in your USB stick. You always need to trust somebody.