Huawei can address the security concerns by using established open source software (which they seem to have).
Would be great to have an alternative to the windows/mac duopoly.
If you don't trust the entity publishing the binaries, then having it simply publishing sourcecode is not a way for you to gain confidence because there is no practical way to be sure that the binaries they deliver are the published code compiled by a non-modified version of an opensource compiler.
They have to provide a way to do reproducible builds.
https://reproducible-builds.org/
There is also a huge challenge when it comes to enable the customer to audit the hardware.
Linux is not inherently compliant (and Deepin isn't AFAIK), but it is entirely possible to package a distribution which is and submit it for certification.