I'm with you on the general idea that we shouldn't blindly believe everything a for-profit corporation says but at the same time we shouldn't allow fact-free speculation, rumor, or just plain cynicism to masquerade as facts either.
I don't think it's controversial that trust in Apple's extremely locked-down ecosystem basically comes down to "we promise". If it's closed source you can't verify. Even if it's open, if it's not a reproducible build (or your own build) that you install yourself then who knows what's on there and what it does?