I am basing my statement on leaks from companies that sell phone hacking equipment to law enforcement, military, intelligence and government contractors.

It’s worth looking into those leaks because they give you insight into what can and cannot be trusted without placing the burden of understanding how on your shoulders.

Avoiding the necessity of deep understanding of hardware and software security details is important because the simpler and more straightforward security is, the more likely to achieve consistent process compliance you are.

If you would like to understand, there’s a ton of resources out there. One recommendation to preserve mental health: never go down the arm derivative design process rabbit hole.

I believe that the mit license is trash and only gpl and other viral licenses are worthwhile, but in case of safety or security the type of software or license isn’t the most important thing.