It&#x27;s not just reading the code -- static analysis tools can provide some guarantees that the software isn&#x27;t exfiltrating information from your box, making unsolicited connections, or leaving unexpected ports open.<p>In theory, we can perform the same analysis on the compiled program&#x27;s bytecode. As the decompilation ecosystem gets better, we may view machine code or bytecode as transparently as source code.<p>Of course, your apple EULA may bind you against decompiling the machine code -- but it can be argued that you&#x27;re not &#x27;reverse engineering&#x27;, you&#x27;re just doing a virus scan.