I think a possible solution for this issue would be to include third-party anonymous auditing: get someone with domain expertise to review the spec, the final product, and communications (without being given the personal details of the two other parties, of course) and give an honest rating of both sides. Obviously, this has scaling issues, but I think a decent amount of people would be willing to pay a premium for a better value proxy.