Sailfish isn’t completely FOSS and the strategy of licensing it to clients like Rostelecom foresees that a lot of the OS will remain closed source.
Besides, no government will actually check the whole OS themselves, so they have to trust some company at some point.
How so? Jolla’s licensing system allows its clients to bundle just as much closed source, phone home software on their phones as any Android system. They can lock the bootloader, etc.
Sailfish isn’t completely FOSS and the strategy of licensing it to clients like Rostelecom foresees that a lot of the OS will remain closed source.