And what guarantees we have that when they ( or any number of other OSS vendors ) include OpenSSH into their product, it isn&#x27;t some boopytrapped variant? Oh wait, it&#x27;s open source, so we can go and find out? Anyone?