It sounds good in theory: the more eyes there are on the code, the less bugs there will be in the future. The reality is that a good percentage of the people u

It sounds good in theory: the more eyes there are on the code, the less bugs there will be in the future. The reality is that a good percentage of the people using the app will never actually fix or report any bugs (or even look at the source for that matter). There are usually a small amount of people that actually do make changes. If you had 1000 developers making constant updates, the project would be impossible to maintain. Many of the open source apps that I've used in the past don't even have bugs discovered for months or even years after they were in the wild, which tells me that it's not that much more efficient at finding and fixing security issues than a closed-sourced app.