You get an up votefor an actual Haikuunlike most others <| sep |> I was going to make a large post about how in the end , even compilers supplied by your OS can ' t be trusted fully . But to keep things short why should i trust every binary found on the internetYou shouldn ' t . But since you ' ve already decided using the rust compiler is fine without auditing it , you ' re putting a measure of trust in the rust team , just as you ' re putting a measure of trust in the gcc team . As long as the checksum is correct , and other people or you can confirm that it ' s the same checksum as obtained by compiling rust with the same previous rust compiler , all the way back to whichever compiler you do trust , that ' s about as much as anyone can do . Another way of looking at it if you don ' t trust the binary , why would you trust the sources also taken from the internet as compiled with gcc . In the end , neither can be fully trusted if you don ' t trust the project it comes from