You're confused about open source software and security. If a business is using proprietary software that is found to have critical security bugs, they are 100

You're confused about open source software and security. If a business is using proprietary software that is found to have critical security bugs, they are 100% beholden to the vendor to get a fix. The vendor may decide to not fix that bug. With free software, when (not if) a bug is found, the user has the right to fix the software. While 'open source' might not be inherently 'more safe' than proprietary code (which we can't audit, so unlikely to be safe), it's inherently more safe due to the fact that the end user might actually be able to fix it, if required.