I mean, who better to be security minded than the people whose job it is to spy on people? (But yeah, the open source part is doing the heavy lifting on trust).