That’s not what I’m saying.
I’m saying you need to trust the people making your OS cause no way in hell is anyone else able to audit every update they push.
Whether your OS is trustworthy depends on their history. In that regard, I’d give Ubuntu a solid B-
Obviously, yes. My point is: Do you read and understand all changes in the code for each update? You need to trust the maintainers, cause they could theoretically push out any code with the update.