It would be nice if we could reason about security and privacy properties of software simply by considering which company or organization provided it, but that is not how software security --- particularly cryptographic software security --- works in the real world.