I don't think that's true. Care to pick some metric to check it? If anything, having source also makes it easier to auto scan for flaws at the source level and

I don't think that's true. Care to pick some metric to check it? If anything, having source also makes it easier to auto scan for flaws at the source level and find holes. I know from CVEs that OS projects has a significant number of high profile long standing holes in it.