Should Privacy Guides require open-source, source-first or source-available as a criteria for all tools?

I agree with everything you said, but it’s still not that simple.

Sometimes, you need ‘Trust’ even in open-source projects. Some people jumped ship from Firefox because of their latest poor communication fiasco. Trust applies here.

You also have to ‘Trust’ projects like tailscale where the CEO seem to be “approved” by the users here at PG.

It’s not black and white unfortunately.