If they really wanted to make open source more secure they would just pay people to audit & submit fixes to widely used open source software. Of course the real

If they really wanted to make open source more secure they would just pay people to audit & submit fixes to widely used open source software. Of course the reality today is that the opposite occurs -- when federal intelligence agencies find out about vulnerabilities they prefer to keep the exploits for themselves.