I agree with everything you said, but it’s still not that simple.
Sometimes, you need ‘Trust’ even in open-source projects. Some people jumped ship from Firefox because of their latest poor communication fiasco. Trust applies here.
You also have to ‘Trust’ projects like tailscale where the CEO seem to be “approved” by the users here at PG.
It’s not black and white unfortunately.