One of the things I've learned in life is that We're All Just Folk. There's no magical divinely-inspired programmer out there creating firmware for your pacemaker. The difference between him and me is process, and little else. If I'm given access to the same testing processes they use as part of the open source package, I see no reason to believe my code is going to be worse than anybody else's. Sure, I'd think twice before installing it, but in some sense that's irrational; I should think twice before anything like that because We're All Just Folk, and it's just some guys writing all the firmware we all depend on.

In some ways, it's best not to think too hard about this.