CyanogenMod rolls out secure device-locating feature

Seems to me that unless you are building it from source yourself you are still trusting whoever made the build that it uses the source they say it uses.

Of course open source gives the chance to verify that their claimed source is correctly implemented.