"verify, then trust" is problematic in a world where companies get bought and sold, management changes, business goals shift, etc.

The only protection against this is contracts, but when a company -- like Unity has done twice now -- decides to retroactively change the terms of existing contracts, that means that you cannot trust them at all going into the future even if they're solidly "good" right now.