He ow can you trust the ArcaneOS releases to not be free from backdoors, etc?

Even if you build the image yourself you're still relying on someone else's code. It reminds me of the office space quote, "no one can check all that code. Thumbs up their a$$es."