said by Kosh: auditing software code isn't trivial.
I would disagree with this. Perhaps maybe if the program was obfuscated, but I've never seen that in open source.
I'm referring to smaller programs like bit torrent clients and such. For operating systems, its a little bit different.