Malicious code benefits from nobody being able to see your code whether it's paid or free. If your app, build process, etc is publicly visible on Github/GitLab

Malicious code benefits from nobody being able to see your code whether it's paid or free. If your app, build process, etc is publicly visible on Github/GitLab/BitBucket/etc malicious code can't hide.