no, its "you might know those debian people but I know those google people, and don't know those debian people"

its "if you know people, maybe you are safe to use what they do" not "because you don't know x use y, you don't also know.

ie, I "know" as much about google, as I do about debian people

(btw, I run a lot of debian hosts. I also run google cloud hosted stuff)

you're missing the main difference.

I dont trust anyone working with debian or google.

but debian I can be sure if someone saw a bug/malware happening or in the source, I'd benefit from that. with closed systems the source option is gone. also nobody can report a ISP MitM the binary packages because no one knows the actual build output.

so, trust noone, but acept that open source gives you an edge. always.