The sad thing is you can't trust chromium since it takes effort to keep the Google out. We already had one black box DRM module sneak its way in via background download because the commits aren't checked for sneaky code.