Yes, I trust no one. But I need to get my apps from somewhere. So you have to consider whether to load the app and take the risk or to use no apps (which makes no sense).

But as I wrote: I, myself, think that malware is more unlikely in open source applications.

So I do, what I can to secure my N900. But I know, that it will never be 100% safe!