The comment is a general one. Also it is not a criticism, it was a question because lot of govt are making their tracing app open source.

However, since this is a tracing app and being open source would imply "look, our app is clean, check our code if you do not trust us". Off-course making it open source has other benefits too.

> How do you know you can trust instagram/google maps/ any other common app on your phone?

I don't. If I am using it I know that I have no way to validate or enforce what happens with my data.

You not only need to trust the German government but any intermediate all the way to the store. I doubt that Apple or Google build the app from the repo.

To add, there are currently discussions underway in the German parliament to give our secret services (namely the notorious Verfassungsschutz) the power to compromise IT systems (Bundestrojaner). I'd trust even the government not that much these times.

I agree, its a shame we can't actually trace it all the way from git.

As for conpromising IT systems, arent they just going to bw on a level playing field with NSA and others?