You just need one honest pair of eyes watching the code to sound the alarm. Even if the Bitcoin core developers conspired to sneak in malware, it might affect a few users but would be quickly detected and wouldn't impact the Bitcoin network/protocol itself.