That’s true. And that’s exactly why I give zero trust to any executable that I don’t have the source code of. But there is a huge difference between running kernel level proprietary software and user space apps, which are easily at least sandboxable.