But I find it uncomfortable how much brain time we allow for making value judgements about brands -- it's a purely one-way emotional judgement, because as a general rule, not a single one of the people who run them would so much as piss on you if you were on fire in return.
[ Edit: This is not particularly to be taken as an argument for open source; I don't think people in the open source space are inherently more trustworthy; they have just built mechanisms where I don't have to trust them individually or severally.
We have to stop supporting "teams" in the tech world -- even at the level of employee loyalty. It's damaging, and not just to open source, but to human progress more generally. ]
This may be true, but there are longstanding figures in open source who I would not trust as far as I could spit.
It's a mistake to see the openness of open source or open access as a guide to trusting the people who produced it. Dual_EC_DRBG is a good example of why.
Blindly pick one to trust sure that’s a poor choice.
But we make choices based on our experience and what information we have. I won’t trust anyone forever blindly, but I will pick some for now over others who I find untrustworthy.