There's still a _lot_ of trust involved here...

Possibly silly question but how can you be sure the code on github is the same code running on the site. Not trolling, just curious.