> If one does not trust upstream programs....well that is a bit out of scope of this issue.
This was actually the whole point.
People say "trust us because you can check the code" but checking the code is so complex that you need trust because you can't verify everything.
> As I said earlier, many of the Mobian devs are the same as the Debian on Mobile team, so assuming you don't trust the Mobian devs, you probably shouldn't trust the packages we put in Debian proper as well.
This is where the trust comes in. Not in the availability of the code.
This was actually the whole point.
People say "trust us because you can check the code" but checking the code is so complex that you need trust because you can't verify everything.
> As I said earlier, many of the Mobian devs are the same as the Debian on Mobile team, so assuming you don't trust the Mobian devs, you probably shouldn't trust the packages we put in Debian proper as well.
This is where the trust comes in. Not in the availability of the code.