&gt;How are you ever going to assess the quality of this software in terms of security?<p>I am not aware of a single third party that has reviewed all of the code that goes into a Linux distribution. Do you know of one?