>publishing your source code does make it a lot easier for outsiders to audit your software, but how many people actually do? I would say very, very few people

>publishing your source code does make it a lot easier for outsiders to audit your software, but how many people actually do? I would say very, very few people in the world read random source code looking for bugs. Finding hidden bugs requires active use like a QA person would do. This has probably already been done on any major FOSS software, so any remaining bugs would be unbelievably hard to find, and very unlikely by just reading source code. I mean it sounds good as a theory, but it also sounds like, "If I publish my book online for free, lots of people on the internet will read it."