It's also a false sense of security because community roms are maintained by a small group of (often) entirely anonymous people with nearly zero repercussions if they put something in that they shouldn't.
Implying manufacturers aren’t putting stuff in their ROMs they shouldn’t? At least these custom ROMs are built & maintained in the open.
No, I think the implication is that if a major manufacturer lets something Bad™ slip in, they can be held liable. xXFoneBoi93 could slip in a root kit and the custom ROM they contribute to probably wouldn’t be held accountable in any meaningful way.
That’s how I read it at least
Held liable, as in getting a fine that's 0.3℅ of their yearly revenue ?
Well sure, that’s a completely different discussion though.