I've some questions about Ghidra released by NSA on Github. And research about it then saw a ycombinator thread for it. That answer was clever and funny.
As title marked, you really okay for just "open source" to trust it?
I dont know what you mean by that. Do you mean that the NSA would leave a bug in accidentally? Or intentionally?
Accidentally is definitely plausible, they are only human after all.
Intentionally would be incredibly stupid. The offensive side of the NSA spends billions developing malware that can't be easily found and attributed to them. Inserting one of those malwares into a piece of software they have publically claimed ownership off completely defeats the point. If they wanted to backdoor an open source software, why wouldn't they do it anonymously...