>>kytazo+Ji
Unless you build it yourself you
do trust the devs. You aren't running public code on your phone you're running compiled binaries. Compiled by who? How securely? Who has keys?
It's also a leap of faith to assume that public code is any safer.