I even took the time to quote that, because it’s important.

What's important is that you're quoting me out of context, and that makes all the difference. The actual statement you're replying to is:

You don’t have to trust anybody when you run your own server, or you use a server that doesn’t collect information it has no business collecting.

The fact that you proceed to quote me out of context and then accuse me of being wrong shows that you lack even a modicum of intellectual integrity. Then you proceed to make a straw man arguing against something I never claimed.

Just becuase it’s less likely to find nefarious code in open source doesn’t mean it doesn’t exist.

So yes, this is very clearly a discussion in bad faith, where you're arguing against a straw man while ignoring what I actually wrote. It's especially incredible since I even followed up with a more detailed explanation which you just ignored:

There’s a big difference between having confidence in open source code that has been audited by many people, and knowing for a fact that the service collects specific information. In the former case, you can never be absolutely sure that the code is not malicious so there is always a risk, but in the latter case you know for a fact that the service is collecting inappropriate information and you have to trust that people operating the service are not using it in adversarial ways. These two scenarios are in no way equivalent.

Do better.