That’s true of all closed source software, not just walled gardens. Any time you don’t have the source, you’re trusting that the developer isn’t screwing you over.

I’d rather trust Apple than the cumulative two dozen developers that have their software running on my phone.