I haven't read all the code in my system. But lots of people certainly have read lots of portions of it, so I can expect that somebody trying to put malicious code there would have to think twice before trying that. Sooner or later somebody will see that, so it is less likely it will be put there intentionally. And if it is there indeed, then there is big chance somebody will fix it. None of this can be asserted about proprietary software.