It’s true, as for recommendations from websites, you should never trust them blindly but do your own research as well.

For Linux distributions though, as there’s no other practical way than trusting them with the packages they provide, one needs to make sure the people behind the project persue the right values. The project itself needs to earn your trust or at least not have a record of violating it.