Open Source software is not immune to backdoors, and can also be hacked. I am afraid simple solutions such as “use only trusted software” just are not good enough in 2022.

We need defence in depth, and a physical switch would be one of the best protection mechanism.

Just like developers learnt the hard way that user input should not be trusted, users need to realise that software should not be trusted either.