What’s to stop attested open source systems, apart from pesky licence violations that I doubt would stop anyone powerful?