Linux firmware updates: who do you trust?

While installing firmware updates today, I found myself wondering: whom am I actually trusting when I update my firmware? This surely was an important question as I didn't know where they come from in