With third-party code, I'd say a true "senior engineer" has been burned enough to understand that third-party code is no different than any other code--it can have bugs, security flaws, and other risks. Third-party code gains trust the same way that first-person code gains trust: testing and time in service.