This is a frankly a bad take. Just because something is foss doesn’t mean that it can’t poss a risk. Software tends to have security vulnerabilities and supply chain attacks. From a security perspective you want to follow best practices such as least privilege and defense in depth. Blinding trusting software is not a good idea regardless of the source.