This post reminds me how far you actually need to go to do a full, like really full, verification. I'll see if i can find an article on this topic. E.g. can you trust the compiler that you use to compile the code you've verified to be legit and downloaded? Any many more questions like that.
More accurately: it reveals that trust is perpetual and ubiquitous. There's no such thing as 'trustless'. It's only a question of exactly who / what you trust, and exactly what that trust is based on.
reply
A lot of Bitcoiners have yet to learn this
reply