Is security not taken seriously? Should we have a standard or something so that every software must pass before going production? https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

Who does the verification? Companies won't let you inspect their sources. Do not trust any application implicitly. Steam deleted users data entirely due to a bug in installer. Tons of exploits in common software. Qubes os is a good idea precisely because of this. I'm sharing a machine now so can't go full qubes, but it's definitely going to be my next setup.

There is this good book Click to kill everybody, which shows tons of applications/policies/standards which can be followed. Above book is mostly centric to the US, but can be applicable else where too. Its true we can not do the through verification but we can lay down some practices which can follow.