It was more a question of finding the time within the daily business of doing science. I suppose it is also a culture issue, the priority to do a review is usually low. In other words, there was de facto never a review.

From a scientific modeler perspective: Always trying to do 5 (or 4), but I’m having difficulties getting a culture of reviewing each other’s codes going. Many times I was asked to “just merge” months after submitting a PR. In the context of operational or large community codes, 5 is usually strictly enforced. Weather services don’t appreciate broken code.

Of course one would have to trust Jolla. But then again, isn’t that always the case for everything that isn’t 100% open source? And even then, there could be compromised code somewhere. SFOS is in use for many years, there is an active community around it but the closed source parts of the OS, including hardware vendor drivers, are, well, closed source.

But then that’s just it. Whom do we want to trust? There is no 100% open source phone and SFOS seems the only persistent Linux-based OS for phones around.