This sounds quite the argument for basing critical workflows only on software for which the user has both access and permission to modify the source code.