The "many eyes makes all bugs shallow" quote was never said in the context of security vulnerabilities, and I would argue that they are different in nature. No

The "many eyes makes all bugs shallow" quote was never said in the context of security vulnerabilities, and I would argue that they are different in nature. Normally, a bug means that something that I want to work doesn't. Then I can fix it or report it. When the bug is a security vulnerability (e.g. Hertbleed), then everything work as it should, I can log into all the servers I have access to and all the functionality I want is there. The difference is that someone else can get access to my system or get access to information they are not supposed to. You don't discover this by using the system, you have to actively be looking for vulnerabilities. This is quite different from other kinds of bugs.