The same way I can trust all the binary blobs vendors stick into GPL-licensed systems. How do I make an informed decision about those?