Re: One lesson to be learnt frin this (was Wormable holes)
Absolutely correct. You can never trust a binary.
Any responsible organisation, under good governance, would insist on only Open Source, to reduce the risk.
As has been mentioned, if Microsoft was a responsible agent, it would have released the code to XP as open source, so everybody would have access to it to be able to look for the trapdoors and trojans hidden in it...