It didn't help that at some point on of the main distribution points for FOSS shipped archives stuffed with malware that the authors had no idea about.
Yeah, I used to place some trust in programs under certain licenses, or downloaded from that place. Now the license is a hard requirement and so is not being from that place.