Ever since I read the story of writing a backdoor in the unix login prompt, then writing that change into the compiler so the login prompt code looks clean, then writing that change into the running compiler, so the compiler code looks clean, but the running compiler will backdoor itself or the login prompt, I've had the feeling that the best bet is not to trust as far as possible and not to worry as far as possible.

Smart people will always be able to outsmart me, stupid people with power or desirables will always be able to coerce me into lowering my standards.