Provided you can trust the build tools. The compiler, linker, install package builder...
You just have to trust someone.
You have no choice.