I would say, their source code should be available for anyone to see, especially security researches. And what is installed on the phone should be exactly what is available in public.