Does anyone really look at the code in open source?

Answer

Yes. Large open source projects are continuously reviewed by developers, security researchers, companies and independent organisations. In addition, operators can carry out their own audits or commission them without being dependent on the manufacturer.