You can then audit the tests to ensure they test some condition that you are concerned about.
In reality nobody audits source code like that (see heartbleed for an unrelated example of critical code that didn't get proper audits from people who should have cared)
