[Bush2000]

Yes; that's why you check the source code. :-)

You actually expect anyone --including my Mom -- who uses NSA Linux to read the source code for vulnerabilities?

[InfraRed]

You actually expect anyone --including my Mom -- who uses NSA Linux to read the source code for vulnerabilities?

If you will not check the source code for Mom, there are plenty of other eyes on the 'net that can and will.

If Mom is running "closed source", your only choice is to keep your prying eyes to yourself. This requires that you have blind faith in those that produced the proprietary code which is controlling Mom's machine.

It's not terribly difficult to grasp which code base is more likely to be trusted.

[TechJunkYard]

anyone --including my Mom -- who uses NSA Linux

Your own mom uses Linux? ;-)
Well, somebody will review the code, and if Mom reads either the tech press or Slashdot, (heh-heh) she'll hear about it.