Obviously trust is involved but can be minimized by inspecting before running, revision control, and community oversight.