> It is generally accepted in the security community that hiding source code does not provide security Yes. But with not enough eyes carefully reviewing the co

> It is generally accepted in the security community that hiding source code does not provide security Yes. But with not enough eyes carefully reviewing the code security vulnerabilities will remain also in open source code. And once a bad actor finds it it will be easier to implement an exploit. It's not opening the source that makes the software more secure. It's enough reviewers or white hats looking at the code. Security vulnerabilities in Linux (both kernel and user space) show that regularly. Of course with closed source your external reviewers are zero, so that's not the solution.