If you trust native code simply because it's open source, why don't you trust browser-interpreted code?