Okay that gave me a good chuckle. But really with FOSS software it’s important to be aware of biases the developers might have. Sure if it’s an open source project, in theory I can audit the code but realistically not so much. If the lead developer is a known bad actor, then there’s reason to be paranoid about vulnerabilities or backdoors being injected into the codebase.