While this is mostly true, everyone would still have to trust the person who understands the code. Therefore you're pretty much putting as much trust into them as you are a closed source developer. Considering then that this dev is extremely trustworthy, having made 3dsident and 3dshell, it...