I prefer the "trust no one" model.
https://blossom.primal.net/8550386de1ff9db5f4672fea6cfb82d77bbb35574bad5f60e38304d341ba90ee.jpg
you audit ALL the code yourself of course...