If that's the stand, EFF is basically with Stallman that there shouldn't be any proprietary software and that view is hard to agree on. > All applications must

If that's the stand, EFF is basically with Stallman that there shouldn't be any proprietary software and that view is hard to agree on. > All applications must be considered unsafe unless we can review the code. Let's face it. I like to give the liberty to people who prefer to keep their code secret and their responsibility to hire people to do proper security auditing. Curious whitehats are welcome to attack systems which have bounty program. While obfuscation is never a good idea in security, the paywall between Facebook and the public keeps large exploits away. Attacks came directly from behavior testing require some cleverness and dedication (of course there are those really dumb XSS everywhere). So in this case, obfuscation by hiding the source code is one way. However, you can argue that someone could have lost work laptop and steal the source code (let just assume some startup whose git repo is clonable entirely onto the laptop).