I appreciate the work you do over on openrepos, but the guy has a point about QA. That's the main difference between updates from you guys at openrepos and Jolla, and it's perfectly acceptable for someone to want to wait for the official package from Jolla that's undergone the sort of rigorous QA w00t is describing. That's the trust he's talking about - not suspicion of malicious code.

The problems back in March with bash are a clear example of that. It shouldn't be up to you guys to do extensive QA, so most people should get their stuff from Jolla and the store so they can be sure their phone will (mostly) keep working.