We trust strangers' open source more than our colleagues'