> Fair point, but if this was open-source, would you really go and read all of the source code in several programming languages and also audit all of the depend

> Fair point, but if this was open-source, would you really go and read all of the source code in several programming languages and also audit all of the dependencies? This probably isn't the best justification to use on tech forums. Odds are higher here and in similar forums that some of audience do indeed read the source code, do static analysis on them, check the libraries for CVEs, etc.