Peer reviews and open source are decent signals but they're not the whole story. In my experience, a lot of these reviews are written by people who don't dig into the code or the legal stuff, just take the company's word for it. Open source is better than closed, sure, but it only works if...