If something is open source that simply doesn’t means it’s safe.
Heavily audited and reproducibility of all its libraries is required to be safe.

The only thing that fulfils is bitcoin core and Linux because these software are protecting trillions of dollars worth of money.

Any other thing accept that is a gamble. There are thousands of ways in which one can backdoor the software. Your dice rolls or any other paranoia method is just useless from these exploits.

I myself didn’t knew that but have spent my time day and night on this topic after I nearly escaped coldcard hack.