Also, if you knew anything about IT Security, you know it's not about the source code, it's about the built artifact you install. Unless you build yourself from the source code, you don't actually know what's on the Play store / App Store.

It's the same sort of person that clicks the 'close' button on banner adds because they think it has to do what it says it does.