content: until someone has taken a look at them.  In my experience, very few people look at patches. They simply blindly trust them. I know I set my cousin's Ubuntu Laptop up years ago to just auto-update. Do you think she ever thinks twice about it? Everytime an app updates on my phone, who breaks it down to analyze it? Allow me to place this into perspective for you: The "Flashlight"[1] app was (allegedly) spying on you for a very long time before anyone took notice. I use the word allegedly because no source code was ever offered and no one fully inspected it. It just requested a lot of very unusual permissions (which is usually the first sign of something shady). Even THEN -- it still took people a VERY long time. Fucking Android TOLD YOU it wanted to access your Calendar and such.. and yet people installed it anyways. This is the world we live in. You don't know until you, personally, comb the source code -- which is rarely difficult to do if given the source code. For the most part a layman can make heads or tails of what's going on if you sit and think about what you're looking at. [1] - http://www.snopes.com/computer/internet/flashlight.asp