Re: This was inevitable. But Android handled it well.
1) Anyone could have reviewed it.
2) Therefore somebody must have reviewed it.
3) So I don't need to.
Unless you can prove that open source code has been competently reviewed, it cannot be any more trustworthy right now than closed source. Reviewing the code weeks after it had been released when people are using packages built from it is too late.