except they are vibe-or-not coded by some dude in Reno NV who wouldn’t pass a phone screen where you work

I'd trust that dude over professional leetcoders any day.

But you're right that trust is a complicated thing and often misplaced. I think as an industry we're always reevaluating our relationship with OSS, and I'm sure LLMs will affect this relationship in some way. It's too early to tell.