With visible source code, at least the security bugs are actual bugs instead of deliberate attacks on the users. Psychologically, people are less likely to comm

With visible source code, at least the security bugs are actual bugs instead of deliberate attacks on the users. Psychologically, people are less likely to commit antisocial acts if they think that they are being watched. So, if nothing else, having visible source code helps reducing some attacks. The more popular a particular project is, the more watched they will feel. I therefore still trust OpenVPN a lot more than I trust Juniper. Every one of its patches goes through a public code review: https://community.openvpn.net/openvpn/wiki/DeveloperDocumentation#Developmentprocesses https://community.openvpn.net/openvpn/wiki/DeveloperDocument... http://sourceforge.net/p/openvpn/mailman/openvpn-devel/?viewmonth=201512&viewday=11 http://sourceforge.net/p/openvpn/mailman/openvpn-devel/?view...