Why it's hard to trust software, but you mostly have to anyway