The solution that is most widely used is to hold accountable the guys you trust. Unless you are a security expert and test everything yourself, you WILL have to trust someone. Open source helps, but does not solve the trust issue automatically.