Well, my point is that it's so unlikely for something to go wrong, it's a
waste of effort, and there are plenty of ways for things to go wrong
regardless. I mentioned the possibility of a nonfree compiler and jxself
extended that further to any compiler which you have not yourself compiled
with a compiler that you have yourself compiled and so on. To be 100% safe,
you would pretty much have to go back to the stone age of computing and start
doing things from scratch.
Then there's actually checking what the source code does, which I meant to
mention before. Nobody checks all the source code they use; most of us depend
on others to do that and make a fuss when something is wrong with it. It is
simply unfeasable for everyone to analyze every source file for every program
they use.
It's one thing to protect yourself, but this is just paranoia that cannot be
resolved efficiently. We have to put some trust somewhere, and I don't think
it's too crazy to trust that free programs do what their source code says.
