trust is not binary. i trust my preinstalled system fonts more than i trust vanguard, as an example.
different goals, different people involved, different scope of access, different amount of review, different amount of use = different levels of trust