So maybe they should open source all they can so that also other can check that there are indeed no backdoors ? ;-)
I'm not deep enough into the Sailfish dev. side of things to comment on how it compares to this (I know enough to suspect that it's probably nowhere near as transparent as this -assuming "this" is 100% correct), I'll let others who are comment in much more detail, ideally they've also had some involvement in UT.