In theory, the great thing about open source is you can inspect it yourself for holes. It seems like the USG would not work on something they can't access themselves, but they can also intrude on closed source software, in ways you cannot discover.