https://www.privacytools.io/#files
How can we be sure that public instances use same source code with firefox send?
Good question. You can't be sure. But it's the same problem with any open source software if you just download it, or use a service. If you wan't to make sure it's the same source code you compile the application yourself or in this case you host your own instance.