workeronthewalls Problem is though, there is just no proof, that this is the case, and nice words are no proof.
workeronthewalls Again, in the end it's a trust issue, and for me personally, shipping closed source, whatever the circumstances might be, does make me trust you less.
Damn! The trouble here is the way you react. You're so overwhelmed by your emotions that you shut down your rationality completely. So let's get back to reality for a minute:
Early security patches are under embargo from Google (for understandable reasons as most manufacturers are big as sea tankers and very slow to move and update their OS) but accessible to the GOS team for them to incorporate in their releases.
These security patches get eventually published. (keep that information in mind as it's relevant in the next point)
GOS releases are reproducible and they have a cryptographic hash
Once the embargo is lifted, guess what? You can build a reproducible GOS with the published patches and check the cryptographic hash is identical
So... unless you're some out of this world wizard who can bend the laws of physics and mathematics to your will, your whole rent on this thread is moot, serves no purpose other than wasting GOS dev team precious time! They kindly and thoroughly answered everything but you're like a dog with a bone, you won't let go!
If one day you catch the GOS team lying about closed source patches being included in the GOS release, then on only then, unleash all your anger! But that (unlikely) day comes, please STFU and stop wasting everyone's time.