Exactly. Demand an open source for every encryption app - or at least those offered to the public en masse.
It's not enough that a FOSS alternative _exists_; it needs to be the case that closed-source encryption is not considered as an actual encryption "end".
Our modern society couldn't exist without some trust, but there are huge differences in types of trust and the trustee's underlying motivations.
Trusting the community to audit is like trusting the scientific method. Anyone can find and point out a flaw, which can then be verified by everyone. That's an idyllic description, and the process is quite imperfect, but it's the best we've got.
Meanwhile, trusting a surveillance company to self police is like trusting a quack medicine healer.
