I think, the situation is easy to understand: If you use a piece of sw (like Qubes OS), you have to trust the devs in some way. If you don’t, don’t use the sw. You cannot separate the decision to “trust the sw” from “trust the devs” - except you are able to read and understand the complete sourcecode plus the sources of their used tools (it exists examples, where malicious code was introduced by the linker/compiler and not by someone via the source code).
So that discussion is useless imho. I have decided to trust use QubesOS (and the same decision means, i have decided to trust the devs of QubesOS). That are only one and not two or more separate decisions!
If i come in the situation to have doubts in the trustwortiness of the Qubes devs, i have to stop the usage of that OS. Easy as that.
1 Like
I’m closing this discussion once again. If someone has a problem, privately flag it to us mods. Or find another venue to complain.