Hacker News Reader

If all projects on github were closed source with public "trust me bro" binaries the situation would be of course much better.

"Trust me bro" is what people say about open source everywhere when it's not true.

No clue what that means.

I would imagine what it means is that in practice open source just gives a false sense of security that someone must have looked at it.