> I'm more comfortable with Debian's security, because I believe that the program author and the packaging developer are on my side as opposed to most apps where the developer is wasting my bandwidth and CPU time downloading ads, and we're hoping that's all he's doing.
Exactly. The relationship between developer and user is a very important factor indeed, and one that is far too often undervalued.